hypershield 0.6.0 → 0.6.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4e425a17360017a9217baf52168ecd222f9bdecf75cbbcf56f07fc6b68d7e209
-  data.tar.gz: 076deb92c895ed1f899af7ac43c588ea31d8e37def75b1d97d91d5e50ca52936
+  metadata.gz: b6ecd356af71a6dcfcc090e7a77ff942d4bdedef2da1eaefe194c9b0f92cf7e0
+  data.tar.gz: 0f4af74bfe94e4848f0da087a30d0031c2da72b18219fca7e5c5d943c05b37f7
 SHA512:
-  metadata.gz: b12d479061018b960312bfb9d2c9f688e2f0fc3989292189c3c49c21e9eefb6152ccbd0a017798c14e854206bb045b3ad39e02f66cf4ace1663b6e3b2e30da3d
-  data.tar.gz: 4d74b975052da48e11ac4822faca31fcdb892c8f4a1359dbe2a2104980fbe54a896983179a3c1cb35ebd8ab508baf432abe9dd0af5f87763dc7f262842ce1e52
+  metadata.gz: defa8e62d56cfb81fbf06df39b35d85103d24b2763b14be7f9e711b0867f29c0833a775da5b2f27c5a12a921bf11571dd9e417d0242cb81c71a497197b286585
+  data.tar.gz: 3d2e07ddb85d84a80f02cf2a5da12c6b12f98b3e852c4ea7856fbde8f9314cc789f1742c9f978acae831b9195d32866bfa812e59d06d6b0910cbe304d70d4f2d

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 0.6.1 (2026-05-23)
+
+- Added `materialized_views` option
+
 ## 0.6.0 (2026-04-14)
 
 - Dropped support for Ruby < 3.3 and Rails < 7.2

data/README.md

@@ -129,6 +129,12 @@ Enable or disable Hypershield in an environment
 Hypershield.enabled = Rails.env.production?
 ```
 
+Include materialized views for Postgres
+
+```ruby
+Hypershield.materialized_views = true
+```
+
 ## History
 
 View the [changelog](CHANGELOG.md)

data/lib/hypershield/version.rb

@@ -1,3 +1,3 @@
 module Hypershield
-  VERSION = "0.6.0"
+  VERSION = "0.6.1"
 end

data/lib/hypershield.rb

@@ -10,9 +10,10 @@ require_relative "hypershield/engine" if defined?(Rails)
 
 module Hypershield
   class << self
-    attr_accessor :enabled, :log_sql, :schemas
+    attr_accessor :enabled, :materialized_views, :log_sql, :schemas
   end
   self.enabled = true
+  self.materialized_views = false
   self.log_sql = false
   self.schemas = {
     hypershield: {
@@ -107,6 +108,10 @@ module Hypershield
       adapter_name.match?(/mysql|trilogy/i)
     end
 
+    def postgresql?
+      adapter_name.match?(/postg/i)
+    end
+
     def tables(schema = nil)
       if schema
         schema = quote(schema)
@@ -123,19 +128,39 @@ module Hypershield
         SELECT
           table_name,
           column_name,
-          ordinal_position,
-          data_type
+          ordinal_position
         FROM
           information_schema.columns
         WHERE
-          table_schema = #{schema}
+          table_schema = %{schema}
       SQL
 
-      select_all(query.squish)
+      if materialized_views && postgresql?
+        query += <<~SQL
+          UNION ALL
+          SELECT
+            c.relname AS table_name,
+            a.attname AS column_name,
+            a.attnum AS ordinal_position
+          FROM
+            pg_attribute a
+          INNER JOIN
+            pg_class c ON a.attrelid = c.oid
+          INNER JOIN
+            pg_namespace n ON c.relnamespace = n.oid
+          WHERE
+            n.nspname = %{schema} AND
+            a.attnum > 0 AND
+            NOT a.attisdropped AND
+            c.relkind = 'm' AND
+            has_column_privilege(c.oid, a.attnum, 'SELECT')
+        SQL
+      end
+
+      select_all(query.squish % {schema: schema})
         .map { |c| c.transform_keys(&:downcase) }
         .group_by { |c| c["table_name"] }
-        .map { |t, cs| [t, cs.sort_by { |c| c["ordinal_position"].to_i }.map { |c| c["column_name"] }] }
-        .to_h
+        .to_h { |t, cs| [t, cs.sort_by { |c| c["ordinal_position"].to_i }.map { |c| c["column_name"] }] }
     end
 
     def select_all(sql)

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hypershield
 version: !ruby/object:Gem::Version
-  version: 0.6.0
+  version: 0.6.1
 platform: ruby
 authors:
 - Andrew Kane
@@ -56,7 +56,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 4.0.6
+rubygems_version: 4.0.10
 specification_version: 4
 summary: Shield sensitive data in Postgres and MySQL
 test_files: []