Diego ImbertandClaude Opus 5 3d4a2133ed fix(datatables): no entry without roles may newly reach a database under roles ...

The previous guard only caught a new name replacing an entry under roles.
A whole-map save could also repoint an existing entry without roles at
that database, or another workspace could point one there, and every
caller of that entry would connect as admin. The rule is now stated on
the saved entries: one that carries no roles and newly points at an
instance database any entry under roles uses, in this workspace or
another, is refused. A declared rename carries its roles and passes.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BjfMkJyKzodxkobqGZ6Lqb

2026-09-16 15:14:29 +02:00

..

ai_session_backups.rs

feat: retention for AI sessions on the object store and in the browser (#11152)

2026-09-16 09:27:49 +02:00

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

datatable_migrations.rs

fix(datatables): refuse a malformed role annotation instead of ignoring it

2026-09-16 15:14:28 +02:00

datatable_permissions.rs

fix(datatables): wait out live listeners, and resolve stored names containing ?

2026-09-16 15:14:29 +02:00

deployment_requests.rs

fix: preserve fork parent linkage on workspace id change (#9716)

2026-06-23 20:54:07 +00:00

lib.rs

feat(datatables): put a data table's connection under Postgres roles

2026-09-16 15:14:28 +02:00

workspaces_extra.rs

refactor(datatables): keep Postgres triggers and data table roles apart

2026-09-16 15:14:29 +02:00

workspaces_oss.rs

feat: add workspace-level service accounts (#8560)

2026-03-27 19:23:03 +00:00

workspaces.rs

fix(datatables): no entry without roles may newly reach a database under roles

2026-09-16 15:14:29 +02:00