Chelabase
ManagementBranches

Review the code that can run in someone else's session

GET
/v1/databases/{id}/branches/{branch_id}/review

The worker scans every live database of the branch, as cloud_admin, for code owned by a non-Admin role that can run in someone else's session (an Admin's included): triggers whose function or table such a role owns, rules on its relations, and its functions that are SECURITY DEFINER or reached from a policy, a default or generated column, a check, an index, a view, a trigger, a rule, a range type or another such function. Each item has a stable key, its reasons, and new when a list was acknowledged that didn't hold it. hash is what protecting (review_hash), acknowledging and fixing confirm. Needs the branch's compute running.

Authorization

bearer
AuthorizationBearer <token>

In: header

Path Parameters

id*string

Database id

Formatuuid
branch_id*string

Branch id

Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/v1/databases/497f6eca-6276-4993-bfeb-53cbbbba6f08/branches/497f6eca-6276-4993-bfeb-53cbbbba6f08/review"
{  "acknowledged_hash": "string",  "hash": "string",  "items": [    {      "database": "string",      "digest": "string",      "function": "string",      "identity": "string",      "key": "string",      "kind": "function",      "name": "string",      "new": true,      "opaque_body": true,      "owner": "string",      "reasons": [        {          "kind": "security_definer",          "via": "string"        }      ],      "schema": "string"    }  ]}