kb-cloud-client-typescript 2.4.0-alpha.91 → 2.4.0-alpha.93

package/src/adminapi/apis/rdbms-api.ts

@@ -46,6 +46,8 @@ import type { ObjectPrivilegeChange } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeObjectList } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeResetStep } from '../models';
+// @ts-ignore
 import type { ObjectPrivilegeSnapshot } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeSubjectType } from '../models';
@@ -884,6 +886,80 @@ export const RdbmsApiAxiosParamCreator = function (configuration?: Configuration
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * @summary List exact column names for account object privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType Object type, either table or view
+         * @param {string} databaseName 
+         * @param {string} objectName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeColumns: async (engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'accountName', accountName)
+            // verify required parameter 'objectType' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'objectType', objectType)
+            // verify required parameter 'databaseName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'databaseName', databaseName)
+            // verify required parameter 'objectName' is not null or undefined
+            assertParamExists('listAccountObjectPrivilegeColumns', 'objectName', objectName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/columns`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (objectType !== undefined) {
+                localVarQueryParameter['objectType'] = objectType;
+            }
+
+            if (databaseName !== undefined) {
+                localVarQueryParameter['databaseName'] = databaseName;
+            }
+
+            if (objectName !== undefined) {
+                localVarQueryParameter['objectName'] = objectName;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -1228,6 +1304,142 @@ export const RdbmsApiAxiosParamCreator = function (configuration?: Configuration
 
 
     
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'accountName', accountName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'accountName', accountName)
+            const localVarPath = `/admin/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
             setSearchParams(localVarUrlObj, localVarQueryParameter);
             let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
             localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
@@ -1773,6 +1985,25 @@ export const RdbmsApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['RdbmsApi.killSession']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * @summary List exact column names for account object privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {string} objectType Object type, either table or view
+         * @param {string} databaseName 
+         * @param {string} objectName 
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async listAccountObjectPrivilegeColumns(engineName: string, orgName: string, clusterName: string, accountName: string, objectType: string, databaseName: string, objectName: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<string>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.listAccountObjectPrivilegeColumns(engineName, orgName, clusterName, accountName, objectType, databaseName, objectName, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.listAccountObjectPrivilegeColumns']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
          * @summary Discover existing native privilege objects with stable routine identities
@@ -1873,6 +2104,44 @@ export const RdbmsApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['RdbmsApi.lockAccount']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.previewAccountPrivilegeReset']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['RdbmsApi.resetAccountPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * unlock an account in cluster
          * @summary Unlock cluster account
@@ -2106,6 +2375,16 @@ export const RdbmsApiFactory = function (configuration?: Configuration, basePath
         killSession(requestParameters: RdbmsApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(axios, basePath));
         },
+        /**
+         * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+         * @summary List exact column names for account object privileges
+         * @param {RdbmsApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        listAccountObjectPrivilegeColumns(requestParameters: RdbmsApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>> {
+            return localVarFp.listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(axios, basePath));
+        },
         /**
          * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
          * @summary Discover existing native privilege objects with stable routine identities
@@ -2166,6 +2445,26 @@ export const RdbmsApiFactory = function (configuration?: Configuration, basePath
         lockAccount(requestParameters: RdbmsApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
             return localVarFp.lockAccount(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {RdbmsApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset(requestParameters: RdbmsApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>> {
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {RdbmsApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges(requestParameters: RdbmsApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * unlock an account in cluster
          * @summary Unlock cluster account
@@ -2364,6 +2663,16 @@ export interface RdbmsApiInterface {
      */
     killSession(requestParameters: RdbmsApiKillSessionRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {RdbmsApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    listAccountObjectPrivilegeColumns(requestParameters: RdbmsApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<string>>;
+
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -2424,6 +2733,26 @@ export interface RdbmsApiInterface {
      */
     lockAccount(requestParameters: RdbmsApiLockAccountRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {RdbmsApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    previewAccountPrivilegeReset(requestParameters: RdbmsApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {RdbmsApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApiInterface
+     */
+    resetAccountPrivileges(requestParameters: RdbmsApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account
@@ -3078,6 +3407,62 @@ export interface RdbmsApiKillSessionRequest {
     readonly keep?: boolean
 }
 
+/**
+ * Request parameters for listAccountObjectPrivilegeColumns operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiListAccountObjectPrivilegeColumnsRequest
+ */
+export interface RdbmsApiListAccountObjectPrivilegeColumnsRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly accountName: string
+
+    /**
+     * Object type, either table or view
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectType: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly databaseName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiListAccountObjectPrivilegeColumns
+     */
+    readonly objectName: string
+}
+
 /**
  * Request parameters for listAccountObjectPrivilegeObjects operation in RdbmsApi.
  * @export
@@ -3316,6 +3701,118 @@ export interface RdbmsApiLockAccountRequest {
     readonly accountName: string
 }
 
+/**
+ * Request parameters for previewAccountPrivilegeReset operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiPreviewAccountPrivilegeResetRequest
+ */
+export interface RdbmsApiPreviewAccountPrivilegeResetRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof RdbmsApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectQualifiers?: string
+}
+
+/**
+ * Request parameters for resetAccountPrivileges operation in RdbmsApi.
+ * @export
+ * @interface RdbmsApiResetAccountPrivilegesRequest
+ */
+export interface RdbmsApiResetAccountPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof RdbmsApiResetAccountPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for unlockAccount operation in RdbmsApi.
  * @export
@@ -3693,6 +4190,18 @@ export class RdbmsApi extends BaseAPI implements RdbmsApiInterface {
         return RdbmsApiFp(this.configuration).killSession(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.session, requestParameters.keep, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * Read MySQL table or view column names using the account management connection. No workbench datasource is required. Names are returned verbatim for column-level grants.
+     * @summary List exact column names for account object privileges
+     * @param {RdbmsApiListAccountObjectPrivilegeColumnsRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public listAccountObjectPrivilegeColumns(requestParameters: RdbmsApiListAccountObjectPrivilegeColumnsRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).listAccountObjectPrivilegeColumns(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.objectType, requestParameters.databaseName, requestParameters.objectName, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * Lists existing objects of one supported kind. Pagination is not a fixed snapshot. PostgreSQL requires a connection database; schema-contained kinds require schemaName. MySQL global/database listing omits databaseName; other kinds require it.
      * @summary Discover existing native privilege objects with stable routine identities
@@ -3765,6 +4274,30 @@ export class RdbmsApi extends BaseAPI implements RdbmsApiInterface {
         return RdbmsApiFp(this.configuration).lockAccount(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {RdbmsApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public previewAccountPrivilegeReset(requestParameters: RdbmsApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {RdbmsApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof RdbmsApi
+     */
+    public resetAccountPrivileges(requestParameters: RdbmsApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return RdbmsApiFp(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * unlock an account in cluster
      * @summary Unlock cluster account