static RESTRICT_TO_USER_OBJECTS_ALLOWED_OIDS: LazyLock<BTreeSet<u32>>Expand description
System catalog objects exempted from check_restrict_to_user_objects.
The mz_mcp_data_product* views are how the MCP agent endpoint
discovers data products; blocking them defeats the isolation model.
mz_show_my_cluster_privileges is referenced by those views to null the
advertised cluster unless the role has USAGE on it (it uses
mz_session_role_memberships() rather than a has_cluster_privilege
body that referenced mz_roles), and is itself useful for a restricted
session to inspect its own privileges.