ashishsinha1602/schemagate v1.6.0 is a release that adds a permission restriction notice to a Text-to-SQL access control tool. schemagate selects only the tables the caller can read and gives them to the language model. It can be used with LangChain, MCP, and SQL agents, and supports Postgres, Oracle, MySQL, and SQL Server. This change is recorded in the v1.6.0 release on GitHub.
The new method tells the model that the schema view is partial on the first line of prompt_fragment() when there are tables or columns the principal cannot see. It requires the model not to guess from the remaining columns and to answer INSUFFICIENT instead. It does not disclose the names of hidden items. The notice can also be turned off with Catalog.restriction_notice = False. According to the release, in a 100-question RBAC Text-to-SQL pilot, the rate of answering questions outside the permission scope dropped from 16% to 5%. The full benchmark figures are BIRD AC-F1 90.1 and Spider 93.0, and the best paper figure cited by the release is 88.1.
However, the improvement figure for questions outside the permission scope comes from a 100-question pilot, so it does not show performance under broader conditions. The author also stated that the table in the earlier release was outdated and measured low. So these numbers should be read as the benchmark results reported by that release, and it is difficult to judge from this material alone whether the effect of the permission restriction notice holds in varied environments.