vasyansk
27d70a987e
handleCheck's error branch wrote last_check_status via an id-only UPDATE, so an authenticated caller's own valid project id paired with a foreign domain id in the URL could flip a stranger's domain to "error" even though Check itself is project-scoped and would 404/error out first. Add project_id to the WHERE clause (queries/domains.sql + generated db/domains.sql.go), thread projectID through Store/TenantStore/SchedStore SetDomainStatus, and pass pid from context at both call sites in handleCheck plus the scheduler. Also collapse checkDomain's inline status derivation in scheduler.go into a call to service.DeriveStatus, the same helper handleCheck already uses, so there's a single source of truth for "drift vs in_sync" instead of two copies that could drift apart. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01BwxdSt4reTm7Dj1oxRvpP3
40 lines
1.3 KiB
SQL
40 lines
1.3 KiB
SQL
-- name: CreateDomain :one
|
|
INSERT INTO domains (id, project_id, provider_account_id, zone_name, zone_id, template_id)
|
|
VALUES ($1, $2, $3, $4, $5, $6)
|
|
RETURNING *;
|
|
|
|
-- name: ImportDomain :one
|
|
INSERT INTO domains (id, project_id, provider_account_id, zone_name, zone_id, template_id)
|
|
VALUES ($1, $2, $3, $4, $5, $6)
|
|
ON CONFLICT (project_id, zone_id) DO NOTHING
|
|
RETURNING *;
|
|
|
|
-- name: UpdateDomainTemplate :one
|
|
UPDATE domains SET template_id = $3 WHERE id = $1 AND project_id = $2
|
|
RETURNING *;
|
|
|
|
-- name: GetDomain :one
|
|
SELECT * FROM domains WHERE id = $1 AND project_id = $2;
|
|
|
|
-- name: ListDomains :many
|
|
SELECT * FROM domains WHERE project_id = $1 ORDER BY created_at;
|
|
|
|
-- name: DeleteDomain :exec
|
|
DELETE FROM domains WHERE id = $1 AND project_id = $2;
|
|
|
|
-- name: LoadDomainFull :one
|
|
SELECT d.zone_id, d.zone_name, a.provider, a.secret_enc, t.doc
|
|
FROM domains d
|
|
JOIN provider_accounts a ON a.id = d.provider_account_id
|
|
LEFT JOIN templates t ON t.id = d.template_id
|
|
WHERE d.id = $1 AND d.project_id = $2;
|
|
|
|
-- name: GetDomainStatus :one
|
|
SELECT last_check_status FROM domains WHERE id = $1;
|
|
|
|
-- name: SetDomainStatus :exec
|
|
UPDATE domains SET last_check_status = $2 WHERE id = $1 AND project_id = $3;
|
|
|
|
-- name: CountDriftDomains :one
|
|
SELECT count(*) FROM domains WHERE last_check_status = 'drift';
|