Solo Developer Shares How a Missing PostgreSQL GRANT Broke Multi-Tenant CRM in Production

·2 views

A Brazilian solo full-stack developer built FunilChat AI, a multi-tenant WhatsApp CRM with an AI agent designed to handle sensitive customer documents including SSN and tax ID equivalents. The system uses PostgreSQL row-level security to isolate data across multiple business clients within a single database, avoiding the complexity of per-tenant deployments. Months into production, an n8n automation workflow silently failed to create handoff notifications because a database migration had granted INSERT on the notifications table but omitted the required GRANT USAGE and SELECT on the associated sequence. The missing sequence permission prevented auto-generated IDs from being created, and the fix required a follow-up migration to explicitly grant those sequence privileges. The project has been running continuously since April 2026 and now spans 21 tables under row-level security across release 2.21.0.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

LLM Agreement Study Finds Models Echo Their Own Priors, Not Message Content

A small art project encoding sentences as only word-length sequences prompted researchers to test whether large language models could recover intended meaning from that minimal signal. The experiment compared model readings of a true message's length sequence against readings of a different length sequence and against randomly assembled texts, measuring positional agreement across four runs. Results showed that treatment-arm agreement never consistently separated from the prior-control arm across all four runs, suggesting models were converging on shared priors rather than decoding actual message content. An early version of the study contained a methodological flaw where the random-baseline vocabulary was drawn from the control arm's own limited readings, artificially inflating the floor and nearly obscuring the real finding. The corrected conclusion is that when evaluating model self-consistency, the meaningful baseline is the model's own prior output, not random chance.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Chinese CS Student Reflects on Startup Job That Ended in Dismissal

A software engineering student from China, who goes by ACatNight, has shared reflections on a formative internship at a small startup during their second semester. The student worked on real-world projects and bugs but was eventually let go after making a mistake on the job. Despite the setback, the experience reshaped their understanding of software development, highlighting the importance of system design, collaboration, and handling pressure beyond just writing code. After returning to school, the student resumed personal projects and is currently studying C# .NET backend development and AI applications using tools like ASP.NET Core, Docker, and Redis. They are also rebuilding a side project called StudyTree, an AI-powered learning reflection tool designed to help users identify knowledge gaps and plan what to learn next.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Students Can Make the Most of $100 Azure Cloud Credits

Many students who receive Azure cloud credits tend to spend them on random experiments rather than building meaningful projects, according to a guide published on DEV Community. The article argues that the real value of cloud credits lies in using them to develop portfolio-worthy skills, not simply exploring available services. It recommends seven project categories, ranging from personal portfolio websites and REST APIs to containerized applications using Docker. Each project type is mapped to practical skills such as backend development, database design, cloud deployment, and DevOps workflows. The guide emphasizes that deployed, publicly accessible projects demonstrate engineering ability far more effectively than code that only runs locally.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Open-Source MCP Server Lets AI Agents Control Android Emulators Autonomously

A developer has released app-automating, an open-source MCP server that enables AI agents to fully control Android devices and emulators without requiring Android Studio or manual interaction. The tool provides 28 functions across three modules covering device lifecycle management, on-screen interaction via Appium, and navigation memory stored in a local SQLite database. Unlike most Android automation tooling, it records every interaction so agents can recall previously mapped routes rather than rediscovering them each time. Built with Python 3.12 and following a Clean Architecture pattern, it is designed as a general-purpose capability layer rather than a dedicated testing framework. Use cases include automated app testing, scraping mobile-only apps, bug reproduction, and handling repetitive on-screen tasks.

0 comments Read more at DEV Community