Disable definer candidate oracles when reader grants are revoked
Disable definer candidate oracles when reader grants are revoked A SECURITY DEFINER search that returns only IDs and scores can still reveal whether a term occurs in source rows. If the reader loses SELECT on that source, ordinary content rereads fail but candidate nomination ma…