Diego ImbertandClaude Opus 5 0ec1cb2bdd fix(datatables): gate the paths that reach a whole database as admin ...

Auditing what still resolved through the unchecked resolver turned up three that act for a
caller and hand back the admin connection: `resolve_pg_source_checked` (behind schema
export, the full-schema read, database creation, import and the forked-database drop), the
connection test, and the schema snapshot a fork clone takes of its parent. On a data table
under roles each let any workspace member — or a fork admin who is nobody in the governing
workspace — read or copy the whole database whatever its roles grant.

All three now require admin reach on the governing workspace. A dump taken under a
restricted role would be a silently truncated copy rather than an error, so refusing is the
only right answer for the copy paths.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012ti5HyeTikPMYyW8YSdiHR

2026-09-08 13:08:34 +02:00

..

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

datatable_migrations.rs

feat(datatables): put a data table's connection under Postgres roles

2026-09-08 13:04:32 +02:00

datatable_permissions.rs

feat(datatables): put a data table's connection under Postgres roles

2026-09-08 13:04:32 +02:00

deployment_requests.rs

fix: preserve fork parent linkage on workspace id change (#9716)

2026-06-23 20:54:07 +00:00

lib.rs

feat(datatables): put a data table's connection under Postgres roles

2026-09-08 13:04:32 +02:00

workspaces_extra.rs

feat(datatables): put a data table's connection under Postgres roles

2026-09-08 13:04:32 +02:00

workspaces_oss.rs

feat: add workspace-level service accounts (#8560)

2026-03-27 19:23:03 +00:00

workspaces.rs

fix(datatables): gate the paths that reach a whole database as admin

2026-09-08 13:08:34 +02:00