forest_admin_agent 1.41.0 → 1.43.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e206afe12d8b554e97e214bc27441b51ddf5252d3e4b1ee5800645bd27baa228
-  data.tar.gz: cb1e6a7aa74f086fb70ebc7f30808db2b984660f6e375a49a5ee3467ebf0dbd2
+  metadata.gz: 2646404b27c4b7c45446b93b09ea1b9f488e26b66760599122950fae26982027
+  data.tar.gz: a61f1f277ddaf461a4629727fb0958f0bd6290eb1e83cd62658d23ceb65de08c
 SHA512:
-  metadata.gz: 681910cfb585cef1e368db4e0f464b8866d35615cd1b2daaee1f02a45da613a52ec0a5063620ea36d2b1f47061486922227cc67cfa2d314b38f97a47c06fb7c8
-  data.tar.gz: 16763d62485a9bf7be6d253fb68352e8da2edc2d7679b606b4b535fce67d2e301e39f236c649d4cb27930fb6b3b9a7daec5643ca9a51fb30e9e34bf14095e20a
+  metadata.gz: 8b357902be6f9a8cfdd0ce5b74695911dd6d31cb7613c3e4bc93658a17691a6c8c7d02744271b15ecebf576e72bdb04c25836eef5ef45d9c234da4df97316d5c
+  data.tar.gz: d129a77b8b1b9fd9e2b96c1bcdb87b45f295062b3cdcab28be6b3975629ad5c3597fcdf4626bae67c2563d8975469129e01512460245900700131e2f05c6fbc0

data/lib/forest_admin_agent/builder/agent_factory.rb

@@ -27,6 +27,7 @@ module ForestAdminAgent
         build_container
         build_cache
         build_logger
+        warn_relation_read_permissions_skipped
       end
 
       def add_datasource(datasource, options = {})
@@ -341,6 +342,19 @@ module ForestAdminAgent
         Facades::Container.cache(:skip_schema_update) == true
       end
 
+      # An auditor reading the boot log should see the weakened posture without reading the config.
+      # Read from the options `setup` was handed: `Facades::Container` resolves against
+      # `AgentFactory.instance`, which a host subclassing this factory has not populated.
+      def warn_relation_read_permissions_skipped
+        return unless @options.to_h[:skip_relation_read_permissions] == true
+
+        @logger.log(
+          'Warn',
+          '[ForestAdmin] skip_relation_read_permissions is true: columns of collections the caller ' \
+          'has no read permission on are served when a relation path reaches them'
+        )
+      end
+
       def log_schema_skip
         @logger.log('Warn', '[ForestAdmin] Schema update skipped (skip_schema_update flag is true)')
         environment = Facades::Container.cache(:is_production) ? 'production' : 'development'

data/lib/forest_admin_agent/routes/capabilities/collections.rb

@@ -68,7 +68,8 @@ module ForestAdminAgent
                 canUseProjectionViaHeader: true,
                 canUseProjectionViaHeaderOnList: true,
                 canUseMultipleFieldsProjectionOnRelation: true,
-                canUseAuditTrail: audit_trail_enabled?
+                canUseAuditTrail: audit_trail_enabled?,
+                checksRelationReadPermissions: !skip_relation_read_permissions?
               }
             },
             status: 200
@@ -83,6 +84,10 @@ module ForestAdminAgent
         def audit_trail_enabled?
           !::ForestAdminAgent::AuditTrail.store.nil?
         end
+
+        def skip_relation_read_permissions?
+          ForestAdminAgent::Facades::Container.config_from_cache[:skip_relation_read_permissions] == true
+        end
       end
     end
   end

data/lib/forest_admin_agent/routes/charts/charts.rb

@@ -55,6 +55,10 @@ module ForestAdminAgent
           field.nil? || field.to_s.empty? ? nil : field
         end
 
+        def skip_relation_read_permissions?
+          ForestAdminAgent::Facades::Container.config_from_cache[:skip_relation_read_permissions] == true
+        end
+
         def validate_and_get_type(type)
           chart_types = %w[Value Objective Pie Line Leaderboard]
           unless chart_types.include?(type)
@@ -202,8 +206,9 @@ module ForestAdminAgent
             )
 
             # A count exposes the cardinality of the relation, which `/relationships/<name>/count`
-            # puts behind `browse`. No path names it, so nothing above sees it.
-            if aggregation.field.nil?
+            # puts behind `browse`. No path names it, so nothing above sees it. It arrived with the
+            # related-read checks, so it goes away with them.
+            if aggregation.field.nil? && !skip_relation_read_permissions?
               context.permissions.can?(:browse, context.datasource.get_collection(field.foreign_collection))
             end
 

data/lib/forest_admin_agent/services/permissions.rb

@@ -66,7 +66,10 @@ module ForestAdminAgent
 
         # An absent permission system is not a denial: `can?` allows everything there, and answering
         # anything else would redact every relation on a deployment that granted nothing to check.
-        return allowed.merge(to_check.to_h { |name| [name, true] }) unless permission_system?
+        # `skip_relation_read_permissions` is the operator asking for that same answer on purpose.
+        if skip_relation_read_permissions? || !permission_system?
+          return allowed.merge(to_check.to_h { |name| [name, true] })
+        end
 
         @read_permissions ||= {}
         missing = to_check - @read_permissions.keys
@@ -273,6 +276,10 @@ module ForestAdminAgent
         names.any? && names.all? { |name| allowed[name] }
       end
 
+      def skip_relation_read_permissions?
+        Facades::Container.config_from_cache[:skip_relation_read_permissions] == true
+      end
+
       def leaf_label(names)
         names.empty? ? 'an unresolved polymorphic relation' : "the '#{names.join("' or '")}' collection"
       end
@@ -330,11 +337,16 @@ module ForestAdminAgent
       end
 
       def collect_search_usages(collection, search, search_extended, usages)
-        return if search.nil? || !collection.respond_to?(:searched_fields)
+        # The stack discards a blank search instead of running it, so there is nothing to authorize.
+        return if search.nil? || search.strip.empty?
 
-        searched = collection.searched_fields(search, search_extended)
+        searched = collection.searched_fields(search, search_extended) if collection.respond_to?(:searched_fields)
 
-        return if searched.nil?
+        if searched.nil?
+          assert_extended_search_checkable(collection, search_extended)
+
+          return
+        end
 
         published = collection.datasource.collections
 
@@ -344,6 +356,27 @@ module ForestAdminAgent
         end
       end
 
+      # Only a callable `replace_search` is a footprint this stack could have described and did not; a
+      # native child search, or no search decorator at all, builds no condition here. A plain search is
+      # served in either case — the extended flag is the caller's own, so the exemption stops there.
+      def assert_extended_search_checkable(collection, search_extended)
+        return unless search_extended
+        return unless describes_own_search?(collection)
+        return unless permission_system?
+        # Refused ahead of `read_permissions`, so the skip has to be read here as well.
+        return if skip_relation_read_permissions?
+
+        raise ForbiddenError,
+              "You cannot run an extended search on the '#{collection.name}' collection: the fields " \
+              'it reaches cannot be determined, so they cannot be checked against your permissions.'
+      end
+
+      # Reaches the search decorator only through `CollectionDecorator#search_handler?`: drop that
+      # delegation and this answers false for every collection.
+      def describes_own_search?(collection)
+        collection.respond_to?(:search_handler?) && collection.search_handler?
+      end
+
       # `searched_fields` answers below the publication layer — deliberately, so a field hidden by
       # renaming above it is still checked — so it can name a collection `remove_collection` took out
       # of the API. An extended search does reach through to it: the condition is built below

data/lib/forest_admin_agent/utils/query_string_parser.rb

@@ -10,6 +10,7 @@ module ForestAdminAgent
       DEFAULT_ITEMS_PER_PAGE = '15'.freeze
       DEFAULT_PAGE_TO_SKIP = '1'.freeze
       POLYMORPHIC_TARGET_WILDCARD = '*'.freeze
+      FALSY_SEARCH_EXTENDED = [nil, false, 0, '0', 'false', ''].freeze
 
       def self.parse_condition_tree(collection, args)
         filters = begin
@@ -230,21 +231,43 @@ module ForestAdminAgent
         Page.new(offset: 0, limit: limit&.to_i)
       end
 
+      # Presence, not truth: with +||+ a +false+ in the select-all body would silently lose to the
+      # query string. An explicit +null+ or +''+ there is read as absent rather than as "no search",
+      # so neither can widen a result set by discarding the term the URL carried.
+      def self.subset_or_query(args, key)
+        subset = begin
+          args.dig(:params, :data, :attributes, :all_records_subset_query)
+        rescue StandardError
+          nil
+        end
+
+        return subset[key] if subset.is_a?(Hash) && !subset[key].nil? && subset[key] != ''
+
+        begin
+          args.dig(:params, key)
+        rescue StandardError
+          nil
+        end
+      end
+
       def self.parse_search(collection, args)
-        search = args.dig(:params, :data, :attributes, :all_records_subset_query, :search) || args.dig(:params, :search)
+        search = subset_or_query(args, :search)
+
+        return nil if search.nil?
 
-        raise BadRequestError, 'Collection is not searchable' if search && !collection.is_searchable?
+        raise BadRequestError, 'Collection is not searchable' unless collection.is_searchable?
 
-        search
+        unless search.is_a?(String) || search.is_a?(Numeric)
+          raise BadRequestError, 'Search must be a string or a number'
+        end
+
+        search.to_s
       end
 
       def self.parse_search_extended(args)
-        extended = args.dig(:params, :data, :attributes, :all_records_subset_query,
-                            :searchExtended) || args.dig(:params, :searchExtended)
-
-        return false if extended.nil?
+        extended = subset_or_query(args, :searchExtended)
 
-        extended != '0'
+        !FALSY_SEARCH_EXTENDED.include?(extended.is_a?(String) ? extended.downcase : extended)
       end
 
       def self.parse_sort(collection, args)

data/lib/forest_admin_agent/utils/schema/schema_emitter.rb

@@ -6,7 +6,7 @@ module ForestAdminAgent
     module Schema
       class SchemaEmitter
         LIANA_NAME = "agent-ruby"
-        LIANA_VERSION = "1.41.0"
+        LIANA_VERSION = "1.43.0"
 
         def self.generate(datasource)
           datasource.collections

data/lib/forest_admin_agent/version.rb

@@ -1,3 +1,3 @@
 module ForestAdminAgent
-  VERSION = "1.41.0"
+  VERSION = "1.43.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: forest_admin_agent
 version: !ruby/object:Gem::Version
-  version: 1.41.0
+  version: 1.43.0
 platform: ruby
 authors:
 - Matthieu
@@ -9,7 +9,7 @@ authors:
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-09-01 00:00:00.000000000 Z
+date: 2026-09-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport