Diego Imbert e3b36fcead fix(datatable-migrations): never resolve instance credentials into migration job args ...

datatable_database_arg eagerly resolved instance data-table credentials
(including the shared instance-wide Postgres password) and passed them as the
migration job's plaintext `database` arg, landing in v2_job.args. Since the
run route has no admin gate, a non-admin could run a migration and read
args.database to recover the password, granting cross-workspace psql access to
all instance data-table DBs.

Pass a `datatable://<name>` reference for both resource-backed and instance
data tables instead; the pg executor already resolves it to real credentials
server-side at run time, so nothing sensitive is ever stored in the job args.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-07-03 20:08:38 +02:00

..

src

fix(datatable-migrations): never resolve instance credentials into migration job args

2026-07-03 20:08:38 +02:00

Cargo.toml

feat: Fork datatables (#8339)

2026-04-07 21:03:06 +00:00