Skip to content

fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert #23047

fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert

fix(plugin-security)!: evaluate the insert-side RLS check on the row that will be stored, after beforeInsert #23047

Triggered via pull request September 9, 2026 04:34
Status Success
Total duration 49s
Artifacts

pr-automation.yml

on: pull_request
Check PR Size
15s
Check PR Size
Check Changeset
46s
Check Changeset
Auto Label
9s
Auto Label
Fit to window
Zoom out
Zoom in

Annotations

1 notice
Check Changeset: .changeset/insert-check-post-image.md#L0
ADR-0087 exemption (no-migration-prescription): an enforcement-ORDER change: no authorable key, spelling or stored shape moves, so a stored `sys_metadata` row needs no conversion and an upgrader has nothing to hand-edit. What changes is which image the existing `check` predicate is evaluated against; the remedy for a newly-refused insert is to fix the policy or the data, not to migrate metadata.