Troubleshooting

Connection failures: the network-error phrase catalogue

Every fixed network-error phrase RowShield can show, what each one means, and why raw driver messages are never passed through.

Empty results explained: the three meanings of silence

An empty response has three possible meanings. How RowShield tells denied-by-default, genuinely empty and filtered-by-policy apart.

When RowShield and the Security Advisor disagree

RowShield tests runtime behaviour; the dashboard advisor inspects configuration. Here is how to adjudicate when the two disagree.

Infinite-recursion policy errors and the helper fix

Diagnose SQLSTATE 42P17 infinite-recursion policy errors and apply the security definer helper-function pattern, with a worked example.

Alerts not arriving: threshold, destination, dedupe

Most missing notifications come down to threshold filtering, destination health or deliberate dedupe. Work through the checks in order.

Revoking access: disconnecting a project

What happens when you disconnect a project: probing stops immediately, credentials are discarded and stored history is deleted on schedule.