Hein ae2b0a4ef4 fix(security): skip row security filter for insert queries ...

Insert queries have no Where clause and read no existing rows, so the
fail-closed check rejected every insert when a row security template
was defined.

2026-10-01 10:47:54 +02:00

..

cache

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

common

fix: fire resolvespec AfterRead/AfterCreate/AfterDelete, key restheadspec total cache by record id

2026-09-30 23:40:32 +02:00

config

fix(db): reduce per-request connection bursts and add dbtrace

2026-09-30 21:44:28 +02:00

dbmanager

fix(security): reorder import statements for consistency

2026-10-01 09:33:57 +02:00

dbtrace

fix(db): reduce per-request connection bursts and add dbtrace

2026-09-30 21:44:28 +02:00

errortracking

fix(errortracking): update error context handling in Sentry

2026-05-21 14:03:01 +02:00

eventbroker

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

funcspec

test(tx): regression tests for per-request transactions across all specs

2026-09-30 23:19:58 +02:00

logger

fix(logger): address audit findings

2026-09-30 13:19:52 +02:00

metrics

refactor(db): remove metrics enabling methods from adapters

2026-04-10 14:13:15 +02:00

middleware

feat(middleware): export clientqueue_enqueued_total counter

2026-09-30 16:16:25 +02:00

modelregistry

fix(modelregistry): address audit findings

2026-09-30 13:26:55 +02:00

mqttspec

feat(security): exclude hidden/masked columns from create and update payloads

2026-09-30 23:48:09 +02:00

openapi

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

reflection

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

resolvemcp

feat(security): exclude hidden/masked columns from create and update payloads

2026-09-30 23:48:09 +02:00

resolvespec

fix(restheadspec): handle primary key changes in updates

2026-10-01 10:16:26 +02:00

restheadspec

fix(restheadspec): honour string URL ids on POST updates

2026-10-01 10:23:23 +02:00

security

fix(security): skip row security filter for insert queries

2026-10-01 10:47:54 +02:00

server

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

spectypes

chore(gosec): enable gosec and address findings

2026-09-30 13:16:12 +02:00

testmodels

fix(delete): run delete hooks and queries in one transaction

2026-09-30 22:33:25 +02:00

tracing

fix(tracing): address audit findings

2026-09-30 13:39:50 +02:00

websocketspec

feat(security): exclude hidden/masked columns from create and update payloads

2026-09-30 23:48:09 +02:00