CXH-2379: fix grant/revoke idempotency for DDL-based engines - #151

Open

al-conductorone wants to merge 16 commits into

mainfrom

cxh-2379-baton-sql-fix-grant-and-revoke-idempotency-for-ddl-based

Commits on Sep 3, 2026

CXH-2379: address review feedback on validation-query idempotency
al-conductorone
committed
70f62ac
CXH-2379: don't report GrantReplaced when the grant tx rolled back
al-conductorone
committed
5024f30
CXH-2379: document DB2 grant_replace no-rows semantics and add coverage
al-conductorone
committed
12a6488
CXH-2379: extend DDL grant/revoke idempotency to Oracle
al-conductorone
committed
a439489
CXH-2379: exit with gRPC status code on error via exit.LogExit
al-conductorone
committed
cf1847a
CXH-2379: document DDL validation_queries semantics for Oracle
al-conductorone
committed
f3823b7
Merge branch 'pr-review-fix-a439489e' into cxh-2379-baton-sql-fix-grant-and-revoke-idempotency-for-ddl-based
al-conductorone
committed
ddeebdf
CXH-2379: map DB auth failures to Unauthenticated in Validate
al-conductorone
committed
7cf7eb0
CXH-2379: skip principal-exists probe on validation-sourced no-rows revoke
al-conductorone
committed
9e82a69
CXH-2379: include DB name in auth error and document driver coverage
al-conductorone
committed
8c0917e

Commits on Sep 4, 2026