feat: Data access policy masking#10463

Open

paveltiunov wants to merge 15 commits intomasterfrom

cursor/data-access-policy-masking-888c

Commits on Mar 5, 2026

feat: implement data masking in access policies

cursoragent
and
paveltiunov
committed
test(rbac): add integration tests for data masking in access policies

cursoragent
and
paveltiunov
committed

Commits on Mar 6, 2026

fix: address CI failures for data masking

cursoragent
and
paveltiunov
committed
fix: use destructuring for lint prefer-destructuring rule

cursoragent
and
paveltiunov
committed
fix: require memberLevel when memberMasking is defined in access policy

cursoragent
and
paveltiunov
committed
test(rbac): add view-level masking tests

cursoragent
and
paveltiunov
committed
test(rbac): add view over hidden cube with masking tests

cursoragent
and
paveltiunov
committed
fix(test): exclude secret_string from view masking tests

cursoragent
and
paveltiunov
committed
fix: apply masking at both cube and view levels (RLS pattern)

cursoragent
and
paveltiunov
committed
fix: propagate falsy mask values in views and exclude SQL mask members

cursoragent
and
paveltiunov
committed
fix(test): exclude secret_boolean from view masking tests

cursoragent
and
paveltiunov
committed
fix(test): remove view tests that hit Tesseract FROM-clause issue

cursoragent
and
paveltiunov
committed
fix: resolve dynamic SQL mask {CUBE} references for view members

cursoragent
and
paveltiunov
committed
fix: resolve lint errors in CompilerApi.ts

cursoragent
and
paveltiunov
committed

Commits on Mar 7, 2026

test: add dynamic SQL mask test for view over hidden cube

cursoragent
and
paveltiunov
committed