kb-cloud-client-typescript 2.4.0-alpha.89 → 2.4.0-alpha.90

package/src/adminapi/apis/rdbms-api.ts

@@ -40,6 +40,16 @@ import type { DmsServiceAccountUpdateRequest } from '../models';
 // @ts-ignore
 import type { DmsSession } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeCapabilities } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeChange } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeObjectList } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeSnapshot } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeSubjectType } from '../models';
+// @ts-ignore
 import type { PrivilegeListItem } from '../models';
 /**
  * RdbmsApi - axios parameter creator
@@ -47,6 +57,80 @@ import type { PrivilegeListItem } from '../models';
  */
 export const RdbmsApiAxiosParamCreator = function (configuration?: Configuration) {
     return {
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeChange} body 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\"host\":\"%\"}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        changeAccountObjectPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'accountName', accountName)
+            // verify required parameter 'body' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'body', body)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(body, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * create an account in cluster
          * @summary Create cluster account
@@ -418,6 +502,159 @@ export const RdbmsApiAxiosParamCreator = function (configuration?: Configuration
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivilegeCapabilities: async (engineName: string, orgName: string, clusterName: string, accountName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'accountName', accountName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/capabilities`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {string} [objectName] 
+         * @param {string} [objectId] 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [catalogName] 
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'objectType', objectType)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
+
+            if (objectName !== undefined) {
+                localVarQueryParameter['objectName'] = objectName;
+            }
+
+            if (objectId !== undefined) {
+                localVarQueryParameter['objectId'] = objectId;
+            }
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (catalogName !== undefined) {
+                localVarQueryParameter['catalogName'] = catalogName;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -647,6 +884,91 @@ export const RdbmsApiAxiosParamCreator = function (configuration?: Configuration
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {number} [offset] 
+         * @param {number} [limit] 
+         * @param {string} [catalogName] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeObjects: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'objectType', objectType)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/objects`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
+
+            if (offset !== undefined) {
+                localVarQueryParameter['offset'] = offset;
+            }
+
+            if (limit !== undefined) {
+                localVarQueryParameter['limit'] = limit;
+            }
+
+            if (catalogName !== undefined) {
+                localVarQueryParameter['catalogName'] = catalogName;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -1212,6 +1534,26 @@ export const RdbmsApiAxiosParamCreator = function (configuration?: Configuration
 export const RdbmsApiFp = function(configuration?: Configuration) {
     const localVarAxiosParamCreator = RdbmsApiAxiosParamCreator(configuration)
     return {
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeChange} body 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async changeAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.changeAccountObjectPrivileges(engineName, orgName, clusterName, accountName, body, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.changeAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * create an account in cluster
          * @summary Create cluster account
@@ -1324,6 +1666,47 @@ export const RdbmsApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['RdbmsApi.generateDemoData']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountObjectPrivilegeCapabilities(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeCapabilities>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountObjectPrivilegeCapabilities(engineName, orgName, clusterName, accountName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.getAccountObjectPrivilegeCapabilities']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {string} [objectName] 
+         * @param {string} [objectId] 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [catalogName] 
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountObjectPrivileges(engineName, orgName, clusterName, accountName, objectType, databaseName, schemaName, objectName, objectId, subjectType, host, catalogName, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.getAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * get a database info in cluster
          * @param {string} engineName name of the engine
@@ -1390,6 +1773,28 @@ export const RdbmsApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['RdbmsApi.killSession']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {number} [offset] 
+         * @param {number} [limit] 
+         * @param {string} [catalogName] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listAccountObjectPrivilegeObjects(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeObjectList>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeObjects(engineName, orgName, clusterName, accountName, objectType, databaseName, schemaName, offset, limit, catalogName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.listAccountObjectPrivilegeObjects']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * list accounts in cluster
          * @summary List cluster accounts
@@ -1562,6 +1967,16 @@ export const RdbmsApiFp = function(configuration?: Configuration) {
 export const RdbmsApiFactory = function (configuration?: Configuration, basePath?: string, axios?: AxiosInstance) {
     const localVarFp = RdbmsApiFp(configuration)
     return {
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {RdbmsApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        changeAccountObjectPrivileges(requestParameters: RdbmsApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.changeAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.body, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * create an account in cluster
          * @summary Create cluster account
@@ -1632,6 +2047,26 @@ export const RdbmsApiFactory = function (configuration?: Configuration, basePath
         generateDemoData(requestParameters: RdbmsApiGenerateDemoDataRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.generateDemoData(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivilegeCapabilities(requestParameters: RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities> {
+            return localVarFp.getAccountObjectPrivilegeCapabilities(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {RdbmsApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivileges(requestParameters: RdbmsApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot> {
+            return localVarFp.getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * get a database info in cluster
          * @param {RdbmsApiGetDatabaseRequest} requestParameters Request parameters.
@@ -1671,6 +2106,16 @@ export const RdbmsApiFactory = function (configuration?: Configuration, basePath
         killSession(requestParameters: RdbmsApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {RdbmsApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeObjects(requestParameters: RdbmsApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList> {
+            return localVarFp.listAccountObjectPrivilegeObjects(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.offset, requestParameters.limit, requestParameters.catalogName, options).then((request) => request(axios, basePath));
+        },
         /**
          * list accounts in cluster
          * @summary List cluster accounts
@@ -1780,6 +2225,16 @@ export const RdbmsApiFactory = function (configuration?: Configuration, basePath
  * @interface RdbmsApi
  */
 export interface RdbmsApiInterface {
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {RdbmsApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    changeAccountObjectPrivileges(requestParameters: RdbmsApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -1850,6 +2305,26 @@ export interface RdbmsApiInterface {
      */
     generateDemoData(requestParameters: RdbmsApiGenerateDemoDataRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {RdbmsApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    getAccountObjectPrivileges(requestParameters: RdbmsApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+
     /**
      * get a database info in cluster
      * @param {RdbmsApiGetDatabaseRequest} requestParameters Request parameters.
@@ -1889,6 +2364,16 @@ export interface RdbmsApiInterface {
      */
     killSession(requestParameters: RdbmsApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {RdbmsApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: RdbmsApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
+
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -1991,6 +2476,69 @@ export interface RdbmsApiInterface {
 
 }
 
+/**
+ * Request parameters for changeAccountObjectPrivileges operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiChangeAccountObjectPrivilegesRequest
+ */
+export interface RdbmsApiChangeAccountObjectPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {ObjectPrivilegeChange}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly body: ObjectPrivilegeChange
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof RdbmsApiChangeAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for createAccount operation in RdbmsApi.
  * @export
@@ -2236,6 +2784,139 @@ export interface RdbmsApiGenerateDemoDataRequest {
     readonly accountName: string
 }
 
+/**
+ * Request parameters for getAccountObjectPrivilegeCapabilities operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest
+ */
+export interface RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly accountName: string
+}
+
+/**
+ * Request parameters for getAccountObjectPrivileges operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiGetAccountObjectPrivilegesRequest
+ */
+export interface RdbmsApiGetAccountObjectPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly databaseName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly schemaName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly objectName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly objectId?: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly catalogName?: string
+
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof RdbmsApiGetAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for getDatabase operation in RdbmsApi.
  * @export
@@ -2397,6 +3078,83 @@ export interface RdbmsApiKillSessionRequest {
     readonly keep?: boolean
 }
 
+/**
+ * Request parameters for listAccountObjectPrivilegeObjects operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiListAccountObjectPrivilegeObjectsRequest
+ */
+export interface RdbmsApiListAccountObjectPrivilegeObjectsRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly databaseName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly schemaName?: string
+
+    /**
+     * 
+     * @type {number}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly offset?: number
+
+    /**
+     * 
+     * @type {number}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly limit?: number
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeObjects
+     */
+    readonly catalogName?: string
+}
+
 /**
  * Request parameters for listAccounts operation in RdbmsApi.
  * @export
@@ -2768,6 +3526,18 @@ export interface RdbmsApiUpdateServiceAccountRequest {
  * @extends {BaseAPI}
  */
 export class RdbmsApi extends BaseAPI implements RdbmsApiInterface {
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {RdbmsApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public changeAccountObjectPrivileges(requestParameters: RdbmsApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).changeAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.body, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * create an account in cluster
      * @summary Create cluster account
@@ -2852,6 +3622,30 @@ export class RdbmsApi extends BaseAPI implements RdbmsApiInterface {
         return RdbmsApiFp(this.configuration).generateDemoData(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public getAccountObjectPrivilegeCapabilities(requestParameters: RdbmsApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).getAccountObjectPrivilegeCapabilities(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {RdbmsApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public getAccountObjectPrivileges(requestParameters: RdbmsApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * get a database info in cluster
      * @param {RdbmsApiGetDatabaseRequest} requestParameters Request parameters.
@@ -2899,6 +3693,18 @@ export class RdbmsApi extends BaseAPI implements RdbmsApiInterface {
         return RdbmsApiFp(this.configuration).killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {RdbmsApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public listAccountObjectPrivilegeObjects(requestParameters: RdbmsApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).listAccountObjectPrivilegeObjects(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.offset, requestParameters.limit, requestParameters.catalogName, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * list accounts in cluster
      * @summary List cluster accounts