kb-cloud-client-typescript 2.4.0-alpha.89 → 2.4.0-alpha.90

package/src/adminapi/apis/shared-api.ts

@@ -288,6 +288,16 @@ import type { NodeList } from '../models';
 // @ts-ignore
 import type { NodeResourceStatsList } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeCapabilities } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeChange } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeObjectList } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeSnapshot } from '../models';
+// @ts-ignore
+import type { ObjectPrivilegeSubjectType } from '../models';
+// @ts-ignore
 import type { OfflineInstanceList } from '../models';
 // @ts-ignore
 import type { OpsCustom } from '../models';
@@ -1100,6 +1110,80 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
 
 
     
+            localVarHeaderParameter['Content-Type'] = 'application/json';
+
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+            localVarRequestOptions.data = serializeDataIfNeeded(body, localVarRequestOptions, configuration)
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeChange} body 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\"host\":\"%\"}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        changeAccountObjectPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'accountName', accountName)
+            // verify required parameter 'body' is not null or undefined
+            assertParamExists('changeAccountObjectPrivileges', 'body', body)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'PATCH', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
             localVarHeaderParameter['Content-Type'] = 'application/json';
 
             setSearchParams(localVarUrlObj, localVarQueryParameter);
@@ -5432,6 +5516,159 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivilegeCapabilities: async (engineName: string, orgName: string, clusterName: string, accountName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountObjectPrivilegeCapabilities', 'accountName', accountName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/capabilities`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {string} [objectName] 
+         * @param {string} [objectId] 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [catalogName] 
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('getAccountObjectPrivileges', 'objectType', objectType)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
+
+            if (objectName !== undefined) {
+                localVarQueryParameter['objectName'] = objectName;
+            }
+
+            if (objectId !== undefined) {
+                localVarQueryParameter['objectId'] = objectId;
+            }
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (catalogName !== undefined) {
+                localVarQueryParameter['catalogName'] = catalogName;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -8644,6 +8881,91 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {number} [offset] 
+         * @param {number} [limit] 
+         * @param {string} [catalogName] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeObjects: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeObjects', 'objectType', objectType)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/objects`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (schemaName !== undefined) {
+                localVarQueryParameter['schemaName'] = schemaName;
+            }
+
+            if (offset !== undefined) {
+                localVarQueryParameter['offset'] = offset;
+            }
+
+            if (limit !== undefined) {
+                localVarQueryParameter['limit'] = limit;
+            }
+
+            if (catalogName !== undefined) {
+                localVarQueryParameter['catalogName'] = catalogName;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -17910,6 +18232,26 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.buildBackupObj']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeChange} body 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async changeAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, body: ObjectPrivilegeChange, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.changeAccountObjectPrivileges(engineName, orgName, clusterName, accountName, body, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.changeAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Change Elasticsearch account password
@@ -19189,6 +19531,47 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.generateDemoData']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountObjectPrivilegeCapabilities(engineName: string, orgName: string, clusterName: string, accountName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeCapabilities>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountObjectPrivilegeCapabilities(engineName, orgName, clusterName, accountName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.getAccountObjectPrivilegeCapabilities']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {string} [objectName] 
+         * @param {string} [objectId] 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [catalogName] 
+         * @param {string} [subjectQualifiers] JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async getAccountObjectPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, objectName?: string, objectId?: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, catalogName?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeSnapshot>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.getAccountObjectPrivileges(engineName, orgName, clusterName, accountName, objectType, databaseName, schemaName, objectName, objectId, subjectType, host, catalogName, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.getAccountObjectPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Get backup
@@ -20126,6 +20509,28 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.killSession']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType 
+         * @param {string} [databaseName] 
+         * @param {string} [schemaName] 
+         * @param {number} [offset] 
+         * @param {number} [limit] 
+         * @param {string} [catalogName] 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listAccountObjectPrivilegeObjects(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName?: string, schemaName?: string, offset?: number, limit?: number, catalogName?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<ObjectPrivilegeObjectList>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeObjects(engineName, orgName, clusterName, accountName, objectType, databaseName, schemaName, offset, limit, catalogName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.listAccountObjectPrivilegeObjects']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * list accounts in cluster
          * @summary List cluster accounts
@@ -22850,6 +23255,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         buildBackupObj(requestParameters: SharedApiBuildBackupObjRequest, options?: RawAxiosRequestConfig): AxiosPromise<Backup> {
             return localVarFp.buildBackupObj(requestParameters.orgName, requestParameters.environmentName, requestParameters.engineName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Grant or revoke native object and column privileges
+         * @param {SharedApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        changeAccountObjectPrivileges(requestParameters: SharedApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.changeAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.body, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Change Elasticsearch account password
@@ -23681,6 +24096,26 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         generateDemoData(requestParameters: SharedApiGenerateDemoDataRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.generateDemoData(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary List native object privilege capabilities for the connected server
+         * @param {SharedApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivilegeCapabilities(requestParameters: SharedApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities> {
+            return localVarFp.getAccountObjectPrivilegeCapabilities(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+         * @summary Inspect native object and column privileges
+         * @param {SharedApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot> {
+            return localVarFp.getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Get backup
@@ -24270,6 +24705,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+         * @summary Discover existing native privilege objects with stable routine identities
+         * @param {SharedApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeObjects(requestParameters: SharedApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList> {
+            return localVarFp.listAccountObjectPrivilegeObjects(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.offset, requestParameters.limit, requestParameters.catalogName, options).then((request) => request(axios, basePath));
+        },
         /**
          * list accounts in cluster
          * @summary List cluster accounts
@@ -26012,6 +26457,16 @@ export interface SharedApiInterface {
      */
     buildBackupObj(requestParameters: SharedApiBuildBackupObjRequest, options?: RawAxiosRequestConfig): AxiosPromise<Backup>;
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {SharedApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    changeAccountObjectPrivileges(requestParameters: SharedApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * 
      * @summary Change Elasticsearch account password
@@ -26843,6 +27298,26 @@ export interface SharedApiInterface {
      */
     generateDemoData(requestParameters: SharedApiGenerateDemoDataRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {SharedApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    getAccountObjectPrivilegeCapabilities(requestParameters: SharedApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeCapabilities>;
+
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {SharedApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeSnapshot>;
+
     /**
      * 
      * @summary Get backup
@@ -27432,6 +27907,16 @@ export interface SharedApiInterface {
      */
     killSession(requestParameters: SharedApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {SharedApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    listAccountObjectPrivilegeObjects(requestParameters: SharedApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig): AxiosPromise<ObjectPrivilegeObjectList>;
+
     /**
      * list accounts in cluster
      * @summary List cluster accounts
@@ -29485,6 +29970,69 @@ export interface SharedApiBuildBackupObjRequest {
     readonly body: BuildBackupObjRequest
 }
 
+/**
+ * Request parameters for changeAccountObjectPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiChangeAccountObjectPrivilegesRequest
+ */
+export interface SharedApiChangeAccountObjectPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {ObjectPrivilegeChange}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly body: ObjectPrivilegeChange
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof SharedApiChangeAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for changeElasticsearchSecurityUserPassword operation in SharedApi.
  * @export
@@ -32040,6 +32588,139 @@ export interface SharedApiGenerateDemoDataRequest {
     readonly accountName: string
 }
 
+/**
+ * Request parameters for getAccountObjectPrivilegeCapabilities operation in SharedApi.
+ * @export
+ * @interface SharedApiGetAccountObjectPrivilegeCapabilitiesRequest
+ */
+export interface SharedApiGetAccountObjectPrivilegeCapabilitiesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivilegeCapabilities
+     */
+    readonly accountName: string
+}
+
+/**
+ * Request parameters for getAccountObjectPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiGetAccountObjectPrivilegesRequest
+ */
+export interface SharedApiGetAccountObjectPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly databaseName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly schemaName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly objectName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly objectId?: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly catalogName?: string
+
+    /**
+     * JSON object of string identity qualifiers, e.g. {\&quot;host\&quot;:\&quot;%\&quot;}. Allowed keys and defaults come from capabilities. Unknown keys or duplicate identity inputs are rejected.
+     * @type {string}
+     * @memberof SharedApiGetAccountObjectPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for getBackup operation in SharedApi.
  * @export
@@ -34063,6 +34744,83 @@ export interface SharedApiKillSessionRequest {
     readonly keep?: boolean
 }
 
+/**
+ * Request parameters for listAccountObjectPrivilegeObjects operation in SharedApi.
+ * @export
+ * @interface SharedApiListAccountObjectPrivilegeObjectsRequest
+ */
+export interface SharedApiListAccountObjectPrivilegeObjectsRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly accountName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly databaseName?: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly schemaName?: string
+
+    /**
+     * 
+     * @type {number}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly offset?: number
+
+    /**
+     * 
+     * @type {number}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly limit?: number
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiListAccountObjectPrivilegeObjects
+     */
+    readonly catalogName?: string
+}
+
 /**
  * Request parameters for listAccounts operation in SharedApi.
  * @export
@@ -39843,6 +40601,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).buildBackupObj(requestParameters.orgName, requestParameters.environmentName, requestParameters.engineName, requestParameters.body, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Grant or revoke native object and column privileges
+     * @param {SharedApiChangeAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public changeAccountObjectPrivileges(requestParameters: SharedApiChangeAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).changeAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.body, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Change Elasticsearch account password
@@ -40840,6 +41610,30 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).generateDemoData(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary List native object privilege capabilities for the connected server
+     * @param {SharedApiGetAccountObjectPrivilegeCapabilitiesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public getAccountObjectPrivilegeCapabilities(requestParameters: SharedApiGetAccountObjectPrivilegeCapabilitiesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).getAccountObjectPrivilegeCapabilities(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * Native object GRANT/REVOKE alongside presets. Consult capabilities for engine/version-specific object types and privileges. PostgreSQL RESTRICT is the default; MySQL static GRANT OPTION is scope-wide.
+     * @summary Inspect native object and column privileges
+     * @param {SharedApiGetAccountObjectPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public getAccountObjectPrivileges(requestParameters: SharedApiGetAccountObjectPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).getAccountObjectPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.objectName, requestParameters.objectId, requestParameters.subjectType, requestParameters.host, requestParameters.catalogName, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Get backup
@@ -41547,6 +42341,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
+     * @summary Discover existing native privilege objects with stable routine identities
+     * @param {SharedApiListAccountObjectPrivilegeObjectsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public listAccountObjectPrivilegeObjects(requestParameters: SharedApiListAccountObjectPrivilegeObjectsRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).listAccountObjectPrivilegeObjects(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.schemaName, requestParameters.offset, requestParameters.limit, requestParameters.catalogName, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * list accounts in cluster
      * @summary List cluster accounts