Skip to content

Relax Privilege Patterns #42

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
yamaceay wants to merge 3 commits into
base: prevent-sql-injection
Choose a base branch
from
Open

Relax Privilege Patterns #42

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
515bf20
prevent sql injection
yamaceay Feb 18, 2026
f092b43
lint: Added capacity to empty list
yamaceay Feb 19, 2026
a6b134f
privilege patterns modernized
yamaceay Feb 19, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions apis/admin/v1alpha1/auditpolicy_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,12 +17,16 @@ import (
type AuditPolicyParameters struct {
PolicyName string `json:"policyName"`

// +kubebuilder:validation:items:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60]+$`
// +listType=set
AuditActions []string `json:"auditActions"`

// +kubebuilder:default:=ALL
// +kubebuilder:validation:Enum:=SUCCESSFUL;UNSUCCESSFUL;ALL
AuditStatus string `json:"auditStatus,omitempty"`

// +kubebuilder:default:=CRITICAL
// +kubebuilder:validation:Enum:=EMERGENCY;ALERT;CRITICAL;WARNING;INFO
AuditLevel string `json:"auditLevel,omitempty"`

// +kubebuilder:default:=7
Expand Down
4 changes: 2 additions & 2 deletions apis/admin/v1alpha1/role_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,16 +17,16 @@ import (
type RoleParameters struct {
// +kubebuilder:validation:Optional
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
RoleName string `json:"roleName"`

// +kubebuilder:validation:Optional
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
Schema string `json:"schema,omitempty"`

// +listType=set
LdapGroups []string `json:"ldapGroups,omitempty"`

// +listType=set
Privileges []string `json:"privileges,omitempty"`

// +kubebuilder:validation:Optional
Expand Down
4 changes: 2 additions & 2 deletions apis/admin/v1alpha1/user_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ type Password struct {
type UserParameters struct {
// +kubebuilder:validation:Optional
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60]+$`
Username string `json:"username"`

// +kubebuilder:validation:Optional
Expand All @@ -49,7 +49,7 @@ type UserParameters struct {
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
Parameters map[string]string `json:"parameters,omitempty"`

// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60]+$`
// +kubebuilder:default:=DEFAULT
Usergroup string `json:"usergroup,omitempty" default:"DEFAULT"`

Expand Down
2 changes: 1 addition & 1 deletion apis/admin/v1alpha1/usergroup_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,6 @@ import (
type UsergroupParameters struct {
// +kubebuilder:validation:Optional
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
UsergroupName string `json:"usergroupName"`

DisableUserAdmin bool `json:"disableUserAdmin,omitempty"`
Expand All @@ -29,6 +28,7 @@ type UsergroupParameters struct {

// +kubebuilder:validation:Optional
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
// +kubebuilder:validation:Enum:="";password policy
EnableParameterSet string `json:"enableParameterSet,omitempty"`
}

Expand Down
3 changes: 1 addition & 2 deletions apis/schema/v1alpha1/dbschema_types.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,9 @@ import (
type DbSchemaParameters struct {
// +kubebuilder:validation:Optional
// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable"
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
SchemaName string `json:"schemaName"`

// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60a-z]+$`
// +kubebuilder:validation:Pattern:=`^[^",\$\.'\+\-<>|\[\]\{\}\(\)!%*,/:;=\?@\\^~\x60]+$`
Owner string `json:"owner,omitempty"`
}

Expand Down
Loading
Loading