CXH-2379: fix grant/revoke idempotency for the Db2 engine - #151

Merged

al-conductorone merged 19 commits into

mainfrom

cxh-2379-baton-sql-fix-grant-and-revoke-idempotency-for-ddl-based

Sep 10, 2026

Commits on Sep 3, 2026

CXH-2379: address review feedback on validation-query idempotency
al-conductorone
committed
70f62ac
CXH-2379: don't report GrantReplaced when the grant tx rolled back
al-conductorone
committed
5024f30
CXH-2379: document DB2 grant_replace no-rows semantics and add coverage
al-conductorone
committed
12a6488
CXH-2379: extend DDL grant/revoke idempotency to Oracle
al-conductorone
committed
a439489
CXH-2379: exit with gRPC status code on error via exit.LogExit
al-conductorone
committed
cf1847a
CXH-2379: document DDL validation_queries semantics for Oracle
al-conductorone
committed
f3823b7
Merge branch 'pr-review-fix-a439489e' into cxh-2379-baton-sql-fix-grant-and-revoke-idempotency-for-ddl-based
al-conductorone
committed
ddeebdf
CXH-2379: map DB auth failures to Unauthenticated in Validate
al-conductorone
committed
7cf7eb0
CXH-2379: skip principal-exists probe on validation-sourced no-rows revoke
al-conductorone
committed
9e82a69
CXH-2379: include DB name in auth error and document driver coverage
al-conductorone
committed
8c0917e

Commits on Sep 4, 2026

Commits on Sep 8, 2026

CXH-2379: log idempotent validation no-rows at Debug; document Db2 grant_replace contract
al-conductorone
committed
cb6eba8

Commits on Sep 9, 2026

add operation context to validation errors; fix db2-only README, revoke doc comment, grant_replace docs
al-conductorone
committed
adc110d

Commits on Sep 10, 2026

CXH-2379: assert operation prefix in validation test; document Db2 no_transaction requirement
al-conductorone
committed
111f499