Diego ImbertandClaude Opus 5 1f872c5edb fix(datatables): a role only works where it was created, and only under its own name ...

Postgres roles are cluster-wide, so two data tables that generate one name share
a login. The name's discriminator was four bytes, which is searchable rather
than merely unlucky: two data table names that collide were found by hand. It
is now sixteen, and a name that is already taken is refused unless this data
table owns the role (enterprise repo).

The database a data table's roles were created in is recorded with them and
checked where the connection is finally resolved. The guards that refuse a
resource edit read the config separately from the save that enables permissions,
and never expand a `$res:` or `$var:` that can repoint the resource just as
well — so they stay as early refusals while the check that holds is the one at
the point of use.

Dropping a deleted data table's roles now runs after the settings transaction
commits, planned before it: `DROP OWNED` discards their grants for good, and a
save that rolls back after that point would leave a data table naming logins
that no longer exist.

Leaving a workspace takes the tenant of the row it deletes rather than of the
cached identity, which a rename leaves stale, and group deletion takes the
settings row before the membership rows like every other path that frees a
principal.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S5arH3G2Sa1Qqm32veJQ1n

2026-09-03 23:59:04 +02:00

..

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

datatable_acl_oss.rs

fix(datatables): resolve ACL objects against the catalog, and gate on the enterprise edition

2026-09-01 11:58:58 +02:00

datatable_acl.rs

fix(datatables): every route that frees a username takes its tenants with it

2026-09-03 19:43:39 +02:00

datatable_migrations.rs

fix(datatables): close the fail-open in role resolution, and gate the ACL endpoints

2026-09-01 04:48:44 +02:00

datatable_permissions_oss.rs

fix(datatables): a role only works where it was created, and only under its own name

2026-09-03 23:59:04 +02:00

datatable_permissions.rs

fix(datatables): a role only works where it was created, and only under its own name

2026-09-03 23:59:04 +02:00

deployment_requests.rs

fix: preserve fork parent linkage on workspace id change (#9716)

2026-06-23 20:54:07 +00:00

lib.rs

fix(datatables): resolve ACL objects against the catalog, and gate on the enterprise edition

2026-09-01 11:58:58 +02:00

workspaces_extra.rs

fix(security): a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124)

2026-08-19 22:33:46 +02:00

workspaces_oss.rs

feat: add workspace-level service accounts (#8560)

2026-03-27 19:23:03 +00:00

workspaces.rs

fix(datatables): a role only works where it was created, and only under its own name

2026-09-03 23:59:04 +02:00