replaceAttribute setPermissions

Author: fogelito

src/Database/Trait/Attributes.php

@@ -234,6 +234,11 @@ public function updateAttribute(string $collection, string $key, Update $update)
         $this->writeAttributes($definition, $attributes);
         if ($renaming) {
             $this->writeIndexes($definition, $indexes);
+
+            // A grant names its column by key, so it follows the rename as the indexes above
+            // do. Left alone it would name a key nothing has: it would reach nothing, and the
+            // collection would hold a grant createCollection() refuses.
+            $definition->setPermissions(Permission::renameColumn($definition->declaredPermissions() ?? [], $key, $newKey));
         }
 
         if (

src/Database/Trait/Relationships.php

@@ -788,6 +788,14 @@ private function replaceAttribute(string $collection, string $key, Attribute $at
         }
 
         $definition->setAttribute(self::COLLECTION_ATTRIBUTES, \array_map(static fn (Attribute $stored): Document => $stored->toDocument(), $attributes));
+
+        // The one place a relationship's key changes on either side, so the one place a grant
+        // naming it has to follow. Left alone it would name a key nothing has -- unreachable,
+        // and a grant createCollection() refuses. deleteRelationship() drops them the same way
+        // when the key goes entirely.
+        if ($attribute->key !== $key) {
+            $definition->setPermissions(Permission::renameColumn($definition->declaredPermissions() ?? [], $key, $attribute->key));
+        }
         $this->updateMetadata(
             collection: $definition,
             rollbackOperation: null,