Skip to content
PR Automation

fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert #22694

Sign in to view logs

fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert

fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert #22694

Triggered via pull request September 8, 2026 09:04
@os-zhuangos-zhuang
unlabeled #16805
claude/issue-16608-insert-check-post-image
Status Success
Total duration 55s
Artifacts –

pr-automation.yml

on: pull_request
Check PR Size
0s
Check PR Size
Check Changeset
52s
Check Changeset
Auto Label
0s
Auto Label
Fit to window
Zoom out
Zoom in

Annotations

1 notice
Check Changeset: .changeset/insert-check-post-image.md#L0
ADR-0087 exemption (no-migration-prescription): an enforcement-ORDER change: no authorable key, spelling or stored shape moves, so a stored `sys_metadata` row needs no conversion and an upgrader has nothing to hand-edit. What changes is which image the existing `check` predicate is evaluated against; the remedy for a newly-refused insert is to fix the policy or the data, not to migrate metadata.