{
  "id": 9234414,
  "title": "38% of an analyst's questions get \"no records found\" when the data is right there",
  "url": "https://urgent.news/2026/09/23/38-of-an-analysts-questions-get-no-records-found-when-the-data-is",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-23T01:04:31.000Z",
  "source": {
    "name": "Dev.to",
    "slug": "dev-to",
    "url": "https://dev.to/ashish_sinha_5241c7673d93/38-of-an-analysts-questions-get-no-records-found-when-the-data-is-right-there-5edm"
  },
  "original_language": "en",
  "account": "When an analyst poses a question, sometimes the database has no records to provide. In a small schema with an ordinary role split, 38.5% of the analyst's questions fail to return any records. This occurs when the data is present, but the analyst lacks permission to view that data. The model writes a correct query, but row-level security removes all rows. The application receives an empty result set and reports that there are no records, even though the data exists. The issue arises because permission checks happen after generating the query, not before. A pipeline that scopes the schema by caller identity can detect these cases before any SQL is written. Building probe questions out of the tables' own words can help identify which tables are off-limits to the caller. This measurement is not a measure of the model's performance, but rather a measure of whether the data is accessible.",
  "summary": "Your text-to-SQL agent has a failure mode that logs nothing, alerts nothing, and returns a confidently wrong answer. I finally put a number on how often it can happen, and on a small schema with an ordinary role split the number is 38.5%. The failure Someone asks a question whose answer lives in a table they are not allowed to read. The model is handed the whole schema, because that is what…",
  "key_points": [
    "38.5% of analyst questions return no records due to permission issues",
    "Permission checks occur after query generation, not before",
    "Scoping schema by caller identity can detect inaccessible tables"
  ],
  "editors_take": "The finding highlights a flaw in the current system where permission checks after query generation lead to analysts incorrectly getting \"no records found\" results despite existing data.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}