kb-cloud-client-typescript 2.4.0-alpha.92 → 2.4.0-alpha.93

package/src/openapi/apis/shared-api.ts

@@ -282,6 +282,8 @@ import type { ObjectPrivilegeChange } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeObjectList } from '../models';
 // @ts-ignore
+import type { ObjectPrivilegeResetStep } from '../models';
+// @ts-ignore
 import type { ObjectPrivilegeSnapshot } from '../models';
 // @ts-ignore
 import type { ObjectPrivilegeSubjectType } from '../models';
@@ -12919,6 +12921,74 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('previewAccountPrivilegeReset', 'accountName', accountName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'GET', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -15090,6 +15160,74 @@ export const SharedApiAxiosParamCreator = function (configuration?: Configuratio
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges: async (engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options: RawAxiosRequestConfig = {}): Promise<RequestArgs> => {
+            // verify required parameter 'engineName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'engineName', engineName)
+            // verify required parameter 'orgName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'orgName', orgName)
+            // verify required parameter 'clusterName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'clusterName', clusterName)
+            // verify required parameter 'accountName' is not null or undefined
+            assertParamExists('resetAccountPrivileges', 'accountName', accountName)
+            const localVarPath = `/api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset`
+                .replace(`{${"engineName"}}`, encodeURIComponent(String(engineName)))
+                .replace(`{${"orgName"}}`, encodeURIComponent(String(orgName)))
+                .replace(`{${"clusterName"}}`, encodeURIComponent(String(clusterName)))
+                .replace(`{${"accountName"}}`, encodeURIComponent(String(accountName)));
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'DELETE', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication BearerToken required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+            // authentication DigestAuth required
+            await setApiKeyToObject(localVarHeaderParameter, "Authorization", configuration)
+
+            if (subjectType !== undefined) {
+                localVarQueryParameter['subjectType'] = subjectType;
+            }
+
+            if (host !== undefined) {
+                localVarQueryParameter['host'] = host;
+            }
+
+            if (subjectQualifiers !== undefined) {
+                localVarQueryParameter['subjectQualifiers'] = subjectQualifiers;
+            }
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -21837,6 +21975,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.patchOrgParameter']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async previewAccountPrivilegeReset(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<Array<ObjectPrivilegeResetStep>>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.previewAccountPrivilegeReset(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.previewAccountPrivilegeReset']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -22397,6 +22554,25 @@ export const SharedApiFp = function(configuration?: Configuration) {
             const localVarOperationServerBasePath = operationServerMap['SharedApi.reconfigureCluster']?.[localVarOperationServerIndex]?.url;
             return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {string} engineName 
+         * @param {string} orgName 
+         * @param {string} clusterName 
+         * @param {string} accountName 
+         * @param {ObjectPrivilegeSubjectType} [subjectType] Native subject kind; path account name identifies the subject.
+         * @param {string} [host] Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+         * @param {string} [subjectQualifiers] JSON identity qualifiers; MySQL host defaults to %.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async resetAccountPrivileges(engineName: string, orgName: string, clusterName: string, accountName: string, subjectType?: ObjectPrivilegeSubjectType, host?: string, subjectQualifiers?: string, options?: RawAxiosRequestConfig): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.resetAccountPrivileges(engineName, orgName, clusterName, accountName, subjectType, host, subjectQualifiers, options);
+            const localVarOperationServerIndex = configuration?.serverIndex ?? 0;
+            const localVarOperationServerBasePath = operationServerMap['SharedApi.resetAccountPrivileges']?.[localVarOperationServerIndex]?.url;
+            return (axios, basePath) => createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration)(axios, localVarOperationServerBasePath || basePath);
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -25639,6 +25815,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter> {
             return localVarFp.patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Preview clearing all MySQL account privileges
+         * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>> {
+            return localVarFp.previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Produce message to topic
@@ -25918,6 +26104,16 @@ export const SharedApiFactory = function (configuration?: Configuration, basePat
         reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName> {
             return localVarFp.reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(axios, basePath));
         },
+        /**
+         * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+         * @summary Clear all MySQL account privileges
+         * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void> {
+            return localVarFp.resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Reset consumer offset of topic
@@ -28833,6 +29029,16 @@ export interface SharedApiInterface {
      */
     patchOrgParameter(requestParameters: SharedApiPatchOrgParameterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OrgParameter>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig): AxiosPromise<Array<ObjectPrivilegeResetStep>>;
+
     /**
      * 
      * @summary Produce message to topic
@@ -29112,6 +29318,16 @@ export interface SharedApiInterface {
      */
     reconfigureCluster(requestParameters: SharedApiReconfigureClusterRequest, options?: RawAxiosRequestConfig): AxiosPromise<OpsRequestName>;
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApiInterface
+     */
+    resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig): AxiosPromise<void>;
+
     /**
      * 
      * @summary Reset consumer offset of topic
@@ -37274,6 +37490,62 @@ export interface SharedApiPatchOrgParameterRequest {
     readonly orgParameter: OrgParameter
 }
 
+/**
+ * Request parameters for previewAccountPrivilegeReset operation in SharedApi.
+ * @export
+ * @interface SharedApiPreviewAccountPrivilegeResetRequest
+ */
+export interface SharedApiPreviewAccountPrivilegeResetRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof SharedApiPreviewAccountPrivilegeReset
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for produceKafkaTopicMessage operation in SharedApi.
  * @export
@@ -39031,6 +39303,62 @@ export interface SharedApiReconfigureClusterRequest {
     readonly body: ReconfigureCreate
 }
 
+/**
+ * Request parameters for resetAccountPrivileges operation in SharedApi.
+ * @export
+ * @interface SharedApiResetAccountPrivilegesRequest
+ */
+export interface SharedApiResetAccountPrivilegesRequest {
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly engineName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly orgName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly clusterName: string
+
+    /**
+     * 
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly accountName: string
+
+    /**
+     * Native subject kind; path account name identifies the subject.
+     * @type {ObjectPrivilegeSubjectType}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly subjectType?: ObjectPrivilegeSubjectType
+
+    /**
+     * Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly host?: string
+
+    /**
+     * JSON identity qualifiers; MySQL host defaults to %.
+     * @type {string}
+     * @memberof SharedApiResetAccountPrivileges
+     */
+    readonly subjectQualifiers?: string
+}
+
 /**
  * Request parameters for resetKafkaTopicConsumerOffset operation in SharedApi.
  * @export
@@ -43707,6 +44035,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).patchOrgParameter(requestParameters.orgName, requestParameters.parameterName, requestParameters.orgParameter, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Preview clearing all MySQL account privileges
+     * @param {SharedApiPreviewAccountPrivilegeResetRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public previewAccountPrivilegeReset(requestParameters: SharedApiPreviewAccountPrivilegeResetRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).previewAccountPrivilegeReset(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Produce message to topic
@@ -44042,6 +44382,18 @@ export class SharedApi extends BaseAPI implements SharedApiInterface {
         return SharedApiFp(this.configuration).reconfigureCluster(requestParameters.orgName, requestParameters.clusterName, requestParameters.body, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+     * @summary Clear all MySQL account privileges
+     * @param {SharedApiResetAccountPrivilegesRequest} requestParameters Request parameters.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof SharedApi
+     */
+    public resetAccountPrivileges(requestParameters: SharedApiResetAccountPrivilegesRequest, options?: RawAxiosRequestConfig) {
+        return SharedApiFp(this.configuration).resetAccountPrivileges(requestParameters.engineName, requestParameters.orgName, requestParameters.clusterName, requestParameters.accountName, requestParameters.subjectType, requestParameters.host, requestParameters.subjectQualifiers, options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Reset consumer offset of topic

package/src/openapi/models/index.ts

@@ -669,6 +669,7 @@ export * from './object-privilege-object-list';
 export * from './object-privilege-prerequisite-check';
 export * from './object-privilege-prerequisite-status';
 export * from './object-privilege-qualifier';
+export * from './object-privilege-reset-step';
 export * from './object-privilege-snapshot';
 export * from './object-privilege-spec';
 export * from './object-privilege-subject';

package/src/openapi/models/object-privilege-reset-step.ts

@@ -0,0 +1,36 @@
+/* tslint:disable */
+/* eslint-disable */
+/**
+ * KubeBlocks Cloud API
+ * KubeBlocks Cloud API is a RESTful API for managing KubeBlocks Cloud resources.  The API is organized around REST.  Our API has predictable resource-oriented URLs, accepts `JSON-encoded` request bodies, returns `JSON-encoded` responses, and uses standard HTTP response codes, authentication, and verbs.  We use standard HTTP authentication and provide API keys to identify who you are. Your API keys carry many privileges, so be sure to keep them secret! Do not share your secret API keys in publicly accessible areas such as GitHub, client-side code, and so forth. 
+ *
+ * The version of the OpenAPI document: 1.0.0
+ * Contact: support@apecloud.com
+ *
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+
+
+/**
+ * One ordered, engine-generated step of an account privilege reset.
+ * @export
+ * @interface ObjectPrivilegeResetStep
+ */
+export interface ObjectPrivilegeResetStep {
+    /**
+     * Connection database in which this statement must run. Omitted when no particular database is required, as with MySQL account-wide REVOKE. This is execution context, not the scope of objects affected by the SQL.
+     * @type {string}
+     * @memberof ObjectPrivilegeResetStep
+     */
+    'databaseName'?: string;
+    /**
+     * Engine-generated SQL for display. Callers cannot submit or modify these steps for execution; reset rebuilds the plan from current grants.
+     * @type {string}
+     * @memberof ObjectPrivilegeResetStep
+     */
+    'sql': string;
+}
+

package/src/openapi.yaml

@@ -19398,6 +19398,131 @@ paths:
           $ref: '#/components/responses/404'
         '500':
           $ref: '#/components/responses/500'
+  /api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/reset:
+    get:
+      tags:
+        - account
+        - rdbms
+        - shared
+      summary: Preview clearing all MySQL account privileges
+      operationId: previewAccountPrivilegeReset
+      description: MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+      parameters:
+        - name: engineName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: accountName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: subjectType
+          in: query
+          required: false
+          schema:
+            $ref: '#/components/schemas/ObjectPrivilegeSubjectType'
+          description: Native subject kind; path account name identifies the subject.
+        - name: host
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+        - name: subjectQualifiers
+          in: query
+          schema:
+            type: string
+          description: JSON identity qualifiers; MySQL host defaults to %.
+      responses:
+        '200':
+          description: Server-generated steps with connection database, in execution order
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/ObjectPrivilegeResetStep'
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+    delete:
+      tags:
+        - account
+        - rdbms
+        - shared
+      summary: Clear all MySQL account privileges
+      operationId: resetAccountPrivileges
+      description: MySQL only. Clears direct privileges at every scope (including columns, routines, dynamic privileges and grant options), explicit role memberships and PROXY grants for one exact user/host. Rejects protected accounts and servers with mandatory roles before writing. Preview does not mutate. Execution re-reads current grants; concurrent new grants can be included. Statements are not atomic; on failure refresh and preview before retrying. Existing sessions follow MySQL privilege-cache semantics; this does not lock the account or terminate connections.
+      parameters:
+        - name: engineName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: accountName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: subjectType
+          in: query
+          required: false
+          schema:
+            $ref: '#/components/schemas/ObjectPrivilegeSubjectType'
+          description: Native subject kind; path account name identifies the subject.
+        - name: host
+          in: query
+          required: false
+          schema:
+            type: string
+          description: Deprecated MySQL host alias. Prefer subjectQualifiers. Do not specify host in both.
+        - name: subjectQualifiers
+          in: query
+          schema:
+            type: string
+          description: JSON identity qualifiers; MySQL host defaults to %.
+      responses:
+        '204':
+          description: Privileges cleared; account and password preserved
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
   /api/v1/data/{engineName}/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/object-privileges/columns:
     get:
       tags:
@@ -40633,6 +40758,20 @@ components:
           type: array
           items:
             $ref: '#/components/schemas/ObjectPrivilegeQualifier'
+    ObjectPrivilegeResetStep:
+      type: object
+      description: One ordered, engine-generated step of an account privilege reset.
+      required:
+        - sql
+      properties:
+        databaseName:
+          type: string
+          description: Connection database in which this statement must run. Omitted when no particular database is required, as with MySQL account-wide REVOKE. This is execution context, not the scope of objects affected by the SQL.
+        sql:
+          type: string
+          x-nullable: false
+          minLength: 1
+          description: Engine-generated SQL for display. Callers cannot submit or modify these steps for execution; reset rebuilds the plan from current grants.
     ObjectPrivilegeObject:
       type: object
       required: