BareSQL Joins the Studio With an Access Audit for PostgreSQL and a Check for SQL That Answers Differently

Mon, 26 Oct 2026 00:00:00 +0000

BareSQL is the studio’s thirty-sixth project: one program, baresql, with two tools in it. BareSQL Audit works out which PostgreSQL login can read which column, and by which route. BareSQL Portable looks for SQL that SQLite, PostgreSQL, MySQL and MariaDB don’t agree on. The launch post introduces both.

The audit follows access through roles at any depth, SET ROLE, ownership, pg_read_all_data, views and row security. Then it checks its answer for every column against the server’s own privilege functions and reports any disagreement. Personal data is recognized from column names and sampled values, and the values never reach the report. With --baseline, a scheduled job fails on the day any login can reach more than before. One case study audits an AI support agent’s login before it goes live and finds a view that would show it customers’ names and email addresses in every tenant.

BareSQL on SoftDevStudio.com

BareSQL Joins the Studio With an Access Audit for PostgreSQL and a Check for SQL That Answers Differently