Reports whether any role has ownership over an object.
Checks if a session is authorized to execute a plan. If not, an error is returned.
Checks if a session is authorized to use resolved_ids. If not, an error is returned.
Filters RbacRequirements based on the session role metadata and RBAC related feature flags.
Generates all requirements needed to execute a given plan.
Generates all the privileges required to execute a read that includes the objects in ids.
Returns true if RBAC is turned on for a session, false otherwise.
Common checks that need to be performed before we can start checking a role’s privileges.