{
  "schema": 1,
  "sqlstate": "42501",
  "condition_name": "insufficient_privilege",
  "runner": "scripts/verify_cases.py",
  "targets": {
    "latest": {
      "binary": "Homebrew PostgreSQL 18.6",
      "required": true
    },
    "pg10": {
      "image": "postgres:10",
      "required": true
    }
  },
  "cases": [
    {
      "id": "permission_denied_sequence",
      "versions": [
        "10",
        "18"
      ],
      "preconditions": [
        "A runner-owned disposable target is provisioned.",
        "The runner can create a login role and grant schema/table privileges."
      ],
      "trigger": "Create a sequence, grant schema usage but no sequence privilege, then call nextval as a separate role.",
      "assertions": [
        "SQLSTATE is 42501 with sequence privilege diagnostic",
        "The denied role session remains IDLE",
        "Granting sequence USAGE permits nextval and returns the first value"
      ],
      "repair": "Grant only the required sequence privilege or change the owning role policy, then retry nextval on the same role session.",
      "cleanup": "Drop the case schema and temporary role with an owner connection."
    }
  ],
  "evidence_status": "authored",
  "snippets": [
    {
      "id": "permission_denied_sequence",
      "case_id": "permission_denied_sequence",
      "language": "sql",
      "statements": {
        "create": "CREATE SEQUENCE syntax_schema.syntax_sequence START WITH 1",
        "grant_schema": "GRANT USAGE ON SCHEMA syntax_schema TO syntax_role",
        "trigger": "SELECT nextval('syntax_schema.syntax_sequence')",
        "grant_usage": "GRANT USAGE ON SEQUENCE syntax_schema.syntax_sequence TO syntax_role",
        "repair": "SELECT nextval('syntax_schema.syntax_sequence')"
      }
    }
  ],
  "runtime": [
    {
      "id": "runtime.42501-syntax-latest-test2.latest",
      "run_id": "42501-syntax-latest-test2",
      "target": "latest",
      "status": "passed",
      "server_version": "18.6 (Homebrew)",
      "server_version_num": 180006,
      "summary_sha256": "9b20c17b31dfdfa581355803aa96f061a5fa4ec674de7b7bdf246879879e26c4",
      "raw_sha256": "1f3a8a70f8b5788ea5c82f341c6cd55e8d84057a2905ae26c4c747dd14f0b280",
      "case_manifest": {
        "id": "manifest.42501",
        "kind": "local_artifact",
        "source_role": "case_manifest",
        "sha256": "63f32b62a86fc78ba7c882dd0f74d4c7f7b5c15fcdd33172520fcf4dfc1b4bc1"
      },
      "snippet_registry": {
        "id": "snippet-registry.42501",
        "kind": "local_artifact",
        "source_role": "snippet_registry",
        "sha256": "1c312de470921306bf563e8efc0ceafc2aed04f4096aeb28f7e471ec9b246a0d"
      },
      "environment": {
        "TimeZone": "Asia/Shanghai",
        "backend_pid": 966,
        "binary": {
          "bindir": "/opt/homebrew/Cellar/postgresql@18/18.6/bin",
          "pg_config": "/opt/homebrew/bin/pg_config",
          "pg_config_version": "PostgreSQL 18.6 (Homebrew)",
          "postgres": "/opt/homebrew/Cellar/postgresql@18/18.6/bin/postgres"
        },
        "connection_scope": "runner-owned localhost port",
        "current_user": "runner",
        "docker": {},
        "lc_messages": "C",
        "libpq_version": "18.6",
        "locale": "en_US.UTF-8",
        "log_destination": "csvlog,jsonlog",
        "log_error_verbosity": "verbose",
        "log_min_error_statement": "error",
        "log_min_messages": "error",
        "logging_collector": "on",
        "machine": "arm64",
        "max_connections": "100",
        "platform": "macOS-26.6.2-arm64-arm-64bit-Mach-O",
        "psycopg_version": "3.3.5",
        "python_version": "3.14.6 (main, Jun 10 2026, 10:03:53) [Clang 21.0.0 (clang-2100.0.123.102)]",
        "server_encoding": "UTF8",
        "server_version": "18.6 (Homebrew)",
        "server_version_num": "180006",
        "target_kind": "latest",
        "wal_level": "logical"
      },
      "observed": {
        "connection_autocommit": true,
        "denied_status": "IDLE",
        "diagnostic": {
          "column_name": null,
          "constraint_name": null,
          "context": null,
          "datatype_name": null,
          "exception_type": "InsufficientPrivilege",
          "internal_position": null,
          "internal_query": null,
          "message_detail": null,
          "message_hint": null,
          "message_primary": "permission denied for sequence permission_sequence",
          "schema_name": null,
          "severity": "ERROR",
          "severity_nonlocalized": "ERROR",
          "source_file": "sequence.c",
          "source_function": "nextval_internal",
          "source_line": "655",
          "sqlstate": "42501",
          "statement_position": null,
          "table_name": null,
          "text": "permission denied for sequence permission_sequence"
        },
        "repair": {
          "granted_sequence_privilege": "USAGE",
          "status": "IDLE",
          "value": 1
        },
        "role": "u42501_d61b41bcce"
      },
      "assertions": [
        {
          "expected": "42501",
          "name": "42501 SQLSTATE",
          "observed": "42501",
          "passed": true
        },
        {
          "expected": "ERROR",
          "name": "42501 ERROR severity",
          "observed": "ERROR",
          "passed": true
        },
        {
          "expected": "permission denied for sequence permission_sequence",
          "name": "42501 primary diagnostic",
          "observed": "permission denied for sequence permission_sequence",
          "passed": true
        },
        {
          "expected": "IDLE",
          "name": "sequence privilege denial leaves session usable",
          "observed": "IDLE",
          "passed": true
        },
        {
          "expected": {
            "status": "IDLE",
            "value": 1
          },
          "name": "narrow grant repairs the same nextval",
          "observed": {
            "status": "IDLE",
            "value": 1
          },
          "passed": true
        }
      ],
      "cleanup": {
        "errors": [],
        "passed": true
      },
      "result": {
        "status": "passed",
        "environment": {
          "TimeZone": "Asia/Shanghai",
          "backend_pid": 966,
          "binary": {
            "bindir": "/opt/homebrew/Cellar/postgresql@18/18.6/bin",
            "pg_config": "/opt/homebrew/bin/pg_config",
            "pg_config_version": "PostgreSQL 18.6 (Homebrew)",
            "postgres": "/opt/homebrew/Cellar/postgresql@18/18.6/bin/postgres"
          },
          "connection_scope": "runner-owned localhost port",
          "current_user": "runner",
          "docker": {},
          "lc_messages": "C",
          "libpq_version": "18.6",
          "locale": "en_US.UTF-8",
          "log_destination": "csvlog,jsonlog",
          "log_error_verbosity": "verbose",
          "log_min_error_statement": "error",
          "log_min_messages": "error",
          "logging_collector": "on",
          "machine": "arm64",
          "max_connections": "100",
          "platform": "macOS-26.6.2-arm64-arm-64bit-Mach-O",
          "psycopg_version": "3.3.5",
          "python_version": "3.14.6 (main, Jun 10 2026, 10:03:53) [Clang 21.0.0 (clang-2100.0.123.102)]",
          "server_encoding": "UTF8",
          "server_version": "18.6 (Homebrew)",
          "server_version_num": "180006",
          "target_kind": "latest",
          "wal_level": "logical"
        },
        "cases": [
          {
            "assertions": [
              {
                "expected": "42501",
                "name": "42501 SQLSTATE",
                "observed": "42501",
                "passed": true
              },
              {
                "expected": "ERROR",
                "name": "42501 ERROR severity",
                "observed": "ERROR",
                "passed": true
              },
              {
                "expected": "permission denied for sequence permission_sequence",
                "name": "42501 primary diagnostic",
                "observed": "permission denied for sequence permission_sequence",
                "passed": true
              },
              {
                "expected": "IDLE",
                "name": "sequence privilege denial leaves session usable",
                "observed": "IDLE",
                "passed": true
              },
              {
                "expected": {
                  "status": "IDLE",
                  "value": 1
                },
                "name": "narrow grant repairs the same nextval",
                "observed": {
                  "status": "IDLE",
                  "value": 1
                },
                "passed": true
              }
            ],
            "case_id": "permission_denied_sequence",
            "cleanup": {
              "errors": [],
              "passed": true
            },
            "elapsed_seconds": 0.013,
            "observed": {
              "connection_autocommit": true,
              "denied_status": "IDLE",
              "diagnostic": {
                "column_name": null,
                "constraint_name": null,
                "context": null,
                "datatype_name": null,
                "exception_type": "InsufficientPrivilege",
                "internal_position": null,
                "internal_query": null,
                "message_detail": null,
                "message_hint": null,
                "message_primary": "permission denied for sequence permission_sequence",
                "schema_name": null,
                "severity": "ERROR",
                "severity_nonlocalized": "ERROR",
                "source_file": "sequence.c",
                "source_function": "nextval_internal",
                "source_line": "655",
                "sqlstate": "42501",
                "statement_position": null,
                "table_name": null,
                "text": "permission denied for sequence permission_sequence"
              },
              "repair": {
                "granted_sequence_privilege": "USAGE",
                "status": "IDLE",
                "value": 1
              },
              "role": "u42501_d61b41bcce"
            },
            "schema": "c42501_permission_denied_sequence",
            "status": "passed"
          }
        ]
      }
    },
    {
      "id": "runtime.42501-syntax-pg10.pg10",
      "run_id": "42501-syntax-pg10",
      "target": "pg10",
      "status": "passed",
      "server_version": "10.21 (Debian 10.21-1.pgdg90+1)",
      "server_version_num": 100021,
      "summary_sha256": "09348bf061a25fb7a37fa703206db34e0769ade791b6a46ae42c92e515a805c4",
      "raw_sha256": "eb589204bc3513ee29e02f02861a7ed77b0dcf1fe162a2fded332d5e3708f999",
      "case_manifest": {
        "id": "manifest.42501",
        "kind": "local_artifact",
        "source_role": "case_manifest",
        "sha256": "63f32b62a86fc78ba7c882dd0f74d4c7f7b5c15fcdd33172520fcf4dfc1b4bc1"
      },
      "snippet_registry": {
        "id": "snippet-registry.42501",
        "kind": "local_artifact",
        "source_role": "snippet_registry",
        "sha256": "1c312de470921306bf563e8efc0ceafc2aed04f4096aeb28f7e471ec9b246a0d"
      },
      "environment": {
        "TimeZone": "Etc/UTC",
        "backend_pid": 78,
        "binary": {},
        "connection_scope": "runner-owned localhost port",
        "current_user": "postgres",
        "docker": {
          "architecture": "arm64",
          "command": "/usr/local/bin/docker",
          "digest": "sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc",
          "id": "sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc",
          "image": "postgres:10",
          "image_created": "2022-06-23T09:11:18.374607054Z",
          "image_ref": "postgres@sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc",
          "log_destination": "csvlog",
          "os": "linux",
          "repo_digests": [
            "postgres@sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc"
          ]
        },
        "lc_messages": "en_US.utf8",
        "libpq_version": "18.6",
        "locale": "en_US.UTF-8",
        "log_destination": "csvlog",
        "log_error_verbosity": "verbose",
        "log_min_error_statement": "error",
        "log_min_messages": "error",
        "logging_collector": "on",
        "machine": "arm64",
        "max_connections": "100",
        "platform": "macOS-26.6.2-arm64-arm-64bit-Mach-O",
        "psycopg_version": "3.3.5",
        "python_version": "3.14.6 (main, Jun 10 2026, 10:03:53) [Clang 21.0.0 (clang-2100.0.123.102)]",
        "server_encoding": "UTF8",
        "server_version": "10.21 (Debian 10.21-1.pgdg90+1)",
        "server_version_num": "100021",
        "target_kind": "pg10",
        "wal_level": "logical"
      },
      "observed": {
        "connection_autocommit": true,
        "denied_status": "IDLE",
        "diagnostic": {
          "column_name": null,
          "constraint_name": null,
          "context": null,
          "datatype_name": null,
          "exception_type": "InsufficientPrivilege",
          "internal_position": null,
          "internal_query": null,
          "message_detail": null,
          "message_hint": null,
          "message_primary": "permission denied for sequence permission_sequence",
          "schema_name": null,
          "severity": "ERROR",
          "severity_nonlocalized": "ERROR",
          "source_file": "sequence.c",
          "source_function": "nextval_internal",
          "source_line": "600",
          "sqlstate": "42501",
          "statement_position": null,
          "table_name": null,
          "text": "permission denied for sequence permission_sequence"
        },
        "repair": {
          "granted_sequence_privilege": "USAGE",
          "status": "IDLE",
          "value": 1
        },
        "role": "u42501_523bc1d1a0"
      },
      "assertions": [
        {
          "expected": "42501",
          "name": "42501 SQLSTATE",
          "observed": "42501",
          "passed": true
        },
        {
          "expected": "ERROR",
          "name": "42501 ERROR severity",
          "observed": "ERROR",
          "passed": true
        },
        {
          "expected": "permission denied for sequence permission_sequence",
          "name": "42501 primary diagnostic",
          "observed": "permission denied for sequence permission_sequence",
          "passed": true
        },
        {
          "expected": "IDLE",
          "name": "sequence privilege denial leaves session usable",
          "observed": "IDLE",
          "passed": true
        },
        {
          "expected": {
            "status": "IDLE",
            "value": 1
          },
          "name": "narrow grant repairs the same nextval",
          "observed": {
            "status": "IDLE",
            "value": 1
          },
          "passed": true
        }
      ],
      "cleanup": {
        "errors": [],
        "passed": true
      },
      "result": {
        "status": "passed",
        "environment": {
          "TimeZone": "Etc/UTC",
          "backend_pid": 78,
          "binary": {},
          "connection_scope": "runner-owned localhost port",
          "current_user": "postgres",
          "docker": {
            "architecture": "arm64",
            "command": "/usr/local/bin/docker",
            "digest": "sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc",
            "id": "sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc",
            "image": "postgres:10",
            "image_created": "2022-06-23T09:11:18.374607054Z",
            "image_ref": "postgres@sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc",
            "log_destination": "csvlog",
            "os": "linux",
            "repo_digests": [
              "postgres@sha256:b2baf8998630663d21370da06387c950e587071bdd307ee34e661cdcc7442bcc"
            ]
          },
          "lc_messages": "en_US.utf8",
          "libpq_version": "18.6",
          "locale": "en_US.UTF-8",
          "log_destination": "csvlog",
          "log_error_verbosity": "verbose",
          "log_min_error_statement": "error",
          "log_min_messages": "error",
          "logging_collector": "on",
          "machine": "arm64",
          "max_connections": "100",
          "platform": "macOS-26.6.2-arm64-arm-64bit-Mach-O",
          "psycopg_version": "3.3.5",
          "python_version": "3.14.6 (main, Jun 10 2026, 10:03:53) [Clang 21.0.0 (clang-2100.0.123.102)]",
          "server_encoding": "UTF8",
          "server_version": "10.21 (Debian 10.21-1.pgdg90+1)",
          "server_version_num": "100021",
          "target_kind": "pg10",
          "wal_level": "logical"
        },
        "cases": [
          {
            "assertions": [
              {
                "expected": "42501",
                "name": "42501 SQLSTATE",
                "observed": "42501",
                "passed": true
              },
              {
                "expected": "ERROR",
                "name": "42501 ERROR severity",
                "observed": "ERROR",
                "passed": true
              },
              {
                "expected": "permission denied for sequence permission_sequence",
                "name": "42501 primary diagnostic",
                "observed": "permission denied for sequence permission_sequence",
                "passed": true
              },
              {
                "expected": "IDLE",
                "name": "sequence privilege denial leaves session usable",
                "observed": "IDLE",
                "passed": true
              },
              {
                "expected": {
                  "status": "IDLE",
                  "value": 1
                },
                "name": "narrow grant repairs the same nextval",
                "observed": {
                  "status": "IDLE",
                  "value": 1
                },
                "passed": true
              }
            ],
            "case_id": "permission_denied_sequence",
            "cleanup": {
              "errors": [],
              "passed": true
            },
            "elapsed_seconds": 0.022,
            "observed": {
              "connection_autocommit": true,
              "denied_status": "IDLE",
              "diagnostic": {
                "column_name": null,
                "constraint_name": null,
                "context": null,
                "datatype_name": null,
                "exception_type": "InsufficientPrivilege",
                "internal_position": null,
                "internal_query": null,
                "message_detail": null,
                "message_hint": null,
                "message_primary": "permission denied for sequence permission_sequence",
                "schema_name": null,
                "severity": "ERROR",
                "severity_nonlocalized": "ERROR",
                "source_file": "sequence.c",
                "source_function": "nextval_internal",
                "source_line": "600",
                "sqlstate": "42501",
                "statement_position": null,
                "table_name": null,
                "text": "permission denied for sequence permission_sequence"
              },
              "repair": {
                "granted_sequence_privilege": "USAGE",
                "status": "IDLE",
                "value": 1
              },
              "role": "u42501_523bc1d1a0"
            },
            "schema": "c42501_permission_denied_sequence",
            "status": "passed"
          }
        ]
      }
    }
  ]
}