hypershield 0.5.1 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e98e57d104b0806c9e066fd885b90f79879feb86796be24d88ff7d8c434b9146
-  data.tar.gz: 414ef3140f273f2668302edd4b6c49f10720ca8a88c070eeb4cf09100a4b734b
+  metadata.gz: b6ecd356af71a6dcfcc090e7a77ff942d4bdedef2da1eaefe194c9b0f92cf7e0
+  data.tar.gz: 0f4af74bfe94e4848f0da087a30d0031c2da72b18219fca7e5c5d943c05b37f7
 SHA512:
-  metadata.gz: f308e251a24d11e3189cff94f846514bff39f14a6896a55e0ccfe53e7f671e3e69001b24f223575a163d54655e761b46818d6584da77c508947e9d93320a8a85
-  data.tar.gz: 14261989078513cc393460e4fa2d27bb2ba157e1e496baa64dfe8323ed86a431f69f3a7291dab81ae337d82e36c39e58afb33471ad22ea9e3e7980376756db8b
+  metadata.gz: defa8e62d56cfb81fbf06df39b35d85103d24b2763b14be7f9e711b0867f29c0833a775da5b2f27c5a12a921bf11571dd9e417d0242cb81c71a497197b286585
+  data.tar.gz: 3d2e07ddb85d84a80f02cf2a5da12c6b12f98b3e852c4ea7856fbde8f9314cc789f1742c9f978acae831b9195d32866bfa812e59d06d6b0910cbe304d70d4f2d

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+## 0.6.1 (2026-05-23)
+
+- Added `materialized_views` option
+
+## 0.6.0 (2026-04-14)
+
+- Dropped support for Ruby < 3.3 and Rails < 7.2
+
 ## 0.5.1 (2025-04-26)
 
 - Added support for Trilogy

data/README.md

@@ -129,6 +129,12 @@ Enable or disable Hypershield in an environment
 Hypershield.enabled = Rails.env.production?
 ```
 
+Include materialized views for Postgres
+
+```ruby
+Hypershield.materialized_views = true
+```
+
 ## History
 
 View the [changelog](CHANGELOG.md)

data/lib/hypershield/version.rb

@@ -1,3 +1,3 @@
 module Hypershield
-  VERSION = "0.5.1"
+  VERSION = "0.6.1"
 end

data/lib/hypershield.rb

@@ -10,9 +10,10 @@ require_relative "hypershield/engine" if defined?(Rails)
 
 module Hypershield
   class << self
-    attr_accessor :enabled, :log_sql, :schemas
+    attr_accessor :enabled, :materialized_views, :log_sql, :schemas
   end
   self.enabled = true
+  self.materialized_views = false
   self.log_sql = false
   self.schemas = {
     hypershield: {
@@ -107,6 +108,10 @@ module Hypershield
       adapter_name.match?(/mysql|trilogy/i)
     end
 
+    def postgresql?
+      adapter_name.match?(/postg/i)
+    end
+
     def tables(schema = nil)
       if schema
         schema = quote(schema)
@@ -119,23 +124,43 @@ module Hypershield
           end
       end
 
-      query = <<-SQL
+      query = <<~SQL
         SELECT
           table_name,
           column_name,
-          ordinal_position,
-          data_type
+          ordinal_position
         FROM
           information_schema.columns
         WHERE
-          table_schema = #{schema}
+          table_schema = %{schema}
       SQL
 
-      select_all(query.squish)
+      if materialized_views && postgresql?
+        query += <<~SQL
+          UNION ALL
+          SELECT
+            c.relname AS table_name,
+            a.attname AS column_name,
+            a.attnum AS ordinal_position
+          FROM
+            pg_attribute a
+          INNER JOIN
+            pg_class c ON a.attrelid = c.oid
+          INNER JOIN
+            pg_namespace n ON c.relnamespace = n.oid
+          WHERE
+            n.nspname = %{schema} AND
+            a.attnum > 0 AND
+            NOT a.attisdropped AND
+            c.relkind = 'm' AND
+            has_column_privilege(c.oid, a.attnum, 'SELECT')
+        SQL
+      end
+
+      select_all(query.squish % {schema: schema})
         .map { |c| c.transform_keys(&:downcase) }
         .group_by { |c| c["table_name"] }
-        .map { |t, cs| [t, cs.sort_by { |c| c["ordinal_position"].to_i }.map { |c| c["column_name"] }] }
-        .to_h
+        .to_h { |t, cs| [t, cs.sort_by { |c| c["ordinal_position"].to_i }.map { |c| c["column_name"] }] }
     end
 
     def select_all(sql)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hypershield
 version: !ruby/object:Gem::Version
-  version: 0.5.1
+  version: 0.6.1
 platform: ruby
 authors:
 - Andrew Kane
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.1'
+        version: '7.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: '7.1'
+        version: '7.2'
 email: andrew@ankane.org
 executables: []
 extensions: []
@@ -49,14 +49,14 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: '3.2'
+      version: '3.3'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.7
+rubygems_version: 4.0.10
 specification_version: 4
 summary: Shield sensitive data in Postgres and MySQL
 test_files: []