Enforce datasource publication write scope
This commit is contained in:
@@ -1220,13 +1220,7 @@ def _publication_context(
|
||||
session: object,
|
||||
principal: object,
|
||||
) -> tuple[Session, ApiPrincipal]:
|
||||
if not isinstance(session, Session):
|
||||
raise TypeError("Datasource providers require a SQLAlchemy session.")
|
||||
if not isinstance(principal, ApiPrincipal):
|
||||
raise DatasourceAccessError("A tenant API principal is required.")
|
||||
if not principal.tenant_id:
|
||||
raise DatasourceAccessError("A tenant API principal is required.")
|
||||
return session, principal
|
||||
return _context(session, principal, SOURCE_WRITE_SCOPE)
|
||||
|
||||
|
||||
def _validate_columns(
|
||||
|
||||
Reference in New Issue
Block a user