ethyca-fides 2.66.2rc0__py2.py3-none-any.whl → 2.67.0__py2.py3-none-any.whl

fides/api/util/cache.py

@@ -334,6 +334,62 @@ def cache_task_tracking_key(request_id: str, celery_task_id: str) -> None:
         )
 
 
+def get_privacy_request_retry_cache_key(privacy_request_id: str) -> str:
+    """Get cache key for tracking privacy request requeue retry attempts."""
+    return f"id-{privacy_request_id}-privacy-request-retry-count"
+
+
+def get_privacy_request_retry_count(privacy_request_id: str) -> int:
+    """Get the current retry count for a privacy request requeue attempts.
+
+    Raises Exception if cache operations fail, allowing callers to handle cache failures appropriately.
+    """
+    cache: FidesopsRedis = get_cache()
+    try:
+        retry_count = cache.get(get_privacy_request_retry_cache_key(privacy_request_id))
+        return int(retry_count) if retry_count else 0
+    except Exception as exc:
+        logger.error(
+            f"Failed to get retry count for privacy request {privacy_request_id}: {exc}"
+        )
+        raise
+
+
+def increment_privacy_request_retry_count(privacy_request_id: str) -> int:
+    """Increment and return the retry count for a privacy request requeue attempts.
+
+    Raises Exception if cache operations fail, allowing callers to handle cache failures appropriately.
+    """
+    cache: FidesopsRedis = get_cache()
+    cache_key = get_privacy_request_retry_cache_key(privacy_request_id)
+
+    try:
+        # Increment the counter, will be 1 if key doesn't exist
+        new_count = cache.incr(cache_key)
+        # Set expiry to prevent cache buildup (24 hours)
+        cache.expire(cache_key, 86400)
+        return new_count
+    except Exception as exc:
+        logger.error(
+            f"Failed to increment retry count for privacy request {privacy_request_id}: {exc}"
+        )
+        raise
+
+
+def reset_privacy_request_retry_count(privacy_request_id: str) -> None:
+    """Reset the retry count for a privacy request requeue attempts.
+
+    Silently fails if cache operations fail since this is cleanup.
+    """
+    cache: FidesopsRedis = get_cache()
+    try:
+        cache.delete(get_privacy_request_retry_cache_key(privacy_request_id))
+    except Exception as exc:
+        logger.warning(
+            f"Failed to reset retry count for privacy request {privacy_request_id}: {exc}"
+        )
+
+
 def celery_tasks_in_flight(celery_task_ids: List[str]) -> bool:
     """Returns True if supplied Celery Tasks appear to be in-flight"""
     if not celery_task_ids:
@@ -387,3 +443,8 @@ def get_queue_counts() -> Dict[str, int]:
         logger.critical(exception)
         queue_counts = {}
     return queue_counts
+
+
+def get_all_masking_secret_keys(privacy_request_id: str) -> List[str]:
+    cache: FidesopsRedis = get_cache()
+    return cache.keys(f"id-{privacy_request_id}-masking-secret-*")

fides/api/util/encryption/secrets_util.py

@@ -1,14 +1,17 @@
 import secrets
-from typing import Dict, List, Optional, TypeVar
+from typing import Any, Dict, List, Optional, TypeVar
 
 from loguru import logger
 
+from fides.api.db.session import get_db_session
+from fides.api.models.masking_secret import MaskingSecret
 from fides.api.schemas.masking.masking_secrets import (
     MaskingSecretCache,
     MaskingSecretMeta,
     SecretType,
 )
 from fides.api.util.cache import get_cache, get_masking_secret_cache_key
+from fides.config import CONFIG
 
 T = TypeVar("T")
 
@@ -21,12 +24,14 @@ class SecretsUtil:
         masking_secret_meta: MaskingSecretMeta[T],
     ) -> Optional[T]:
         if privacy_request_id is not None:
-            secret = SecretsUtil._get_secret_from_cache(
-                privacy_request_id, secret_type, masking_secret_meta
+            secret = SecretsUtil.get_masking_secret(
+                privacy_request_id=privacy_request_id,
+                masking_strategy=masking_secret_meta.masking_strategy,
+                secret_type=secret_type,
             )
             if not secret:
                 logger.warning(
-                    "Secret type {} expected from cache but was not present for masking strategy {}",
+                    "Secret type {} expected but was not present for masking strategy {}",
                     secret_type,
                     masking_secret_meta.masking_strategy,
                 )
@@ -37,20 +42,6 @@ class SecretsUtil:
             masking_secret_meta.secret_length
         )
 
-    @staticmethod
-    def _get_secret_from_cache(
-        privacy_request_id: str,
-        secret_type: SecretType,
-        masking_secret_meta: MaskingSecretMeta[T],
-    ) -> Optional[T]:
-        cache = get_cache()
-        masking_secret_cache_key: str = get_masking_secret_cache_key(
-            privacy_request_id=privacy_request_id,
-            masking_strategy=masking_secret_meta.masking_strategy,
-            secret_type=secret_type,
-        )
-        return cache.get_encoded_by_key(masking_secret_cache_key)
-
     @staticmethod
     def generate_secret_string(length: int) -> str:
         return secrets.token_urlsafe(length)
@@ -75,3 +66,42 @@ class SecretsUtil:
                 )
             )
         return masking_secrets
+
+    @staticmethod
+    def get_masking_secret(
+        privacy_request_id: str,
+        masking_strategy: str,
+        secret_type: SecretType,
+    ) -> Optional[Any]:
+        """
+        Attempts to retrieve masking secret from cache first, then falls back to DB.
+        """
+        # TODO: get rid of the cache check after a few releases
+        # Try cache first
+        cache = get_cache()
+        cache_key = get_masking_secret_cache_key(
+            privacy_request_id=privacy_request_id,
+            masking_strategy=masking_strategy,
+            secret_type=secret_type,
+        )
+        secret = cache.get_encoded_by_key(cache_key)
+        if secret is not None:
+            return secret
+
+        # Cache miss - try database
+        session_local = get_db_session(CONFIG)
+        with session_local() as session:
+            masking_secret: MaskingSecret = (
+                session.query(MaskingSecret)
+                .filter(
+                    MaskingSecret.privacy_request_id == privacy_request_id,
+                    MaskingSecret.masking_strategy == masking_strategy,
+                    MaskingSecret.secret_type == secret_type,
+                )
+                .first()
+            )
+
+            if not masking_secret:
+                return None
+
+            return masking_secret.get_secret()

fides/api/util/memory_watchdog.py

@@ -0,0 +1,286 @@
+"""
+Memory watchdog utilities used to proactively interrupt long-running Celery tasks that approach the
+container's memory limits.
+
+The watchdog runs in a background thread and periodically samples the overall system memory usage
+(using `psutil`). When usage exceeds the configured threshold, it immediately sends `SIGUSR1` to
+the current process. The signal handler raises `MemoryLimitExceeded` which can be caught by the
+calling code to perform clean-up and let Celery record the task as failed.
+
+This allows tasks to terminate gracefully with proper error logging, rather than being forcefully
+killed by the system's OOM killer which would result in a WorkerLostError and incomplete cleanup.
+"""
+
+from __future__ import annotations
+
+import os
+import signal
+import threading
+import time
+from functools import wraps
+from types import FrameType, TracebackType
+from typing import Any, Callable, Literal, Optional, Type, TypeVar, Union
+
+import psutil  # type: ignore
+from loguru import logger
+
+F = TypeVar("F", bound=Callable[..., Any])
+
+
+def get_memory_watchdog_enabled() -> bool:
+    """
+    Get the memory_watchdog_enabled setting from the application configuration.
+
+    Returns:
+        bool: True if memory_watchdog_enabled is enabled, False otherwise (defaults to False)
+    """
+    try:
+        from fides.api.api.deps import get_autoclose_db_session as get_db
+        from fides.config.config_proxy import ConfigProxy
+
+        with get_db() as db:
+            config_proxy = ConfigProxy(db)
+            # ConfigProxy returns None when no config record exists, so we must handle None explicitly
+            value = getattr(config_proxy.execution, "memory_watchdog_enabled")
+            return value if value is not None else False
+    except Exception:  # pragma: no cover
+        # default to disabled for backward compatibility
+        return False
+
+
+class MemoryLimitExceeded(RuntimeError):
+    """Raised when the watchdog detects sustained memory usage above the threshold."""
+
+    def __init__(self, message: str, *, memory_percent: Optional[float] = None) -> None:
+        super().__init__(message)
+        self.memory_percent: Optional[float] = memory_percent
+
+
+class MemoryWatchdog:
+    """Background memory monitor that enables graceful task termination.
+
+    Monitors system memory usage and triggers controlled shutdown when usage exceeds the threshold,
+    preventing forceful termination by the system's OOM killer.
+
+    Parameters
+    ----------
+    threshold:
+        Percentage of *overall* system memory usage at which the watchdog triggers.
+    check_interval:
+        How often (in seconds) to sample ``psutil.virtual_memory()``.
+    grace_period:
+        Deprecated - kept for compatibility but defaults to 0 for immediate action.
+    """
+
+    def __init__(
+        self, *, threshold: int = 90, check_interval: float = 0.5, grace_period: int = 0
+    ) -> None:
+        self.threshold = threshold
+        self.check_interval = check_interval
+        self.grace_period = grace_period
+
+        self._thread: Optional[threading.Thread] = None
+        self._monitoring = threading.Event()
+        self._original_handler: Union[
+            Callable[[int, Optional[FrameType]], Any], int, signal.Handlers, None
+        ] = None
+
+    # ---------------------------------------------------------------------
+    # Public helpers
+    # ---------------------------------------------------------------------
+    def start(self) -> None:
+        """Start the background monitoring thread and register the signal handler."""
+        logger.debug(
+            "Starting memory watchdog - threshold={}%, check_interval={}s",
+            self.threshold,
+            self.check_interval,
+        )
+        self._original_handler = signal.signal(signal.SIGUSR1, self._signal_handler)
+        self._monitoring.set()
+        self._thread = threading.Thread(
+            target=self._run, name="memory-watchdog", daemon=True
+        )
+        self._thread.start()
+
+    def stop(self) -> None:
+        """Stop the monitoring thread and restore the previous signal handler."""
+        logger.debug("Stopping memory watchdog")
+        self._monitoring.clear()
+        if self._thread and self._thread.is_alive():
+            self._thread.join(timeout=2)
+        if self._original_handler is not None:
+            signal.signal(signal.SIGUSR1, self._original_handler)
+            self._original_handler = None
+
+    # ------------------------------------------------------------------
+    # Context-manager support
+    # ------------------------------------------------------------------
+    def __enter__(self) -> "MemoryWatchdog":
+        self.start()
+        return self
+
+    def __exit__(
+        self,
+        exc_type: Optional[Type[BaseException]],
+        exc_value: Optional[BaseException],
+        traceback: Optional[TracebackType],
+    ) -> Literal[False]:
+        self.stop()
+        # Do not suppress exceptions
+        return False
+
+    # ------------------------------------------------------------------
+    # Internal helpers
+    # ------------------------------------------------------------------
+    def _signal_handler(
+        self, signum: int, frame: Optional[FrameType]
+    ) -> None:  # noqa: D401 – Celery uses signal handlers
+        """Convert the signal into an exception on the main thread."""
+        current_percent = _system_memory_percent()
+        logger.error("Memory limit exceeded: {}%", current_percent)
+        self.stop()
+        raise MemoryLimitExceeded(
+            "Memory usage exceeded threshold", memory_percent=current_percent
+        )
+
+    def _run(self) -> None:
+        """Background thread body."""
+        while self._monitoring.is_set():
+            try:
+                mem_percent = _system_memory_percent()
+
+                if mem_percent > self.threshold:
+                    # Trigger graceful termination before the system OOM killer can intervene
+                    logger.error(
+                        "Memory usage {}% above threshold {}% - sending SIGUSR1 to terminate task gracefully (prevents OOM kill)",
+                        mem_percent,
+                        self.threshold,
+                    )
+                    os.kill(os.getpid(), signal.SIGUSR1)
+                    return  # stop monitoring after signal
+
+                time.sleep(self.check_interval)
+            except Exception as exc:  # pragma: no cover – best-effort logging
+                logger.exception("Uncaught error in memory watchdog: {}", exc)
+                break
+
+
+# -----------------------------------------------------------------------------
+# Decorator for Celery tasks (or any function)
+# -----------------------------------------------------------------------------
+
+
+def memory_limiter(
+    _func: Optional[F] = None,
+    *,
+    threshold: int = 90,
+    check_interval: float = 0.5,
+    grace_period: int = 0,
+) -> Union[F, Callable[[F], F]]:
+    """Decorator that runs the wrapped callable under a :class:`MemoryWatchdog`.
+
+    Enables graceful task termination when memory usage is high, preventing WorkerLostError
+    from system OOM killer intervention.
+
+    Can be applied **with or without arguments**::
+
+        @memory_limiter
+        def task_a():
+            ...
+
+        @memory_limiter(threshold=85)
+        def task_b():
+            ...
+    """
+
+    def decorator(func: F) -> F:
+        @wraps(func)
+        def wrapper(*args: Any, **kwargs: Any) -> Any:
+            # Check if memory watchdog is enabled
+            if not get_memory_watchdog_enabled():
+                logger.debug(
+                    "Memory watchdog disabled by configuration - running task without monitoring"
+                )
+                return func(*args, **kwargs)
+
+            watchdog = MemoryWatchdog(
+                threshold=threshold,
+                check_interval=check_interval,
+                grace_period=grace_period,
+            )
+            watchdog.start()
+            try:
+                return func(*args, **kwargs)
+            except MemoryLimitExceeded as exc:
+                logger.error(
+                    "Task terminated gracefully due to memory pressure: {}%",
+                    exc.memory_percent,
+                )
+                raise
+            finally:
+                watchdog.stop()
+
+        return wrapper  # type: ignore[return-value]
+
+    # If called without arguments, the first positional argument is the function
+    if _func is not None and callable(_func):
+        return decorator(_func)
+
+    return decorator
+
+
+# -----------------------------------------------------------------------------
+# Platform helpers – cgroup-aware memory measurement
+# -----------------------------------------------------------------------------
+
+# Docker / Kubernetes containers are usually memory-constrained via cgroups.  If we only look at
+# host-wide memory usage the watchdog will never fire, because the host may still have plenty of
+# free RAM even though the container is about to be OOM-killed.  The helpers below read the
+# relevant cgroup files (v2 first, then v1) and compute the percentage of the *container limit* in
+# use.  When cgroup information is unavailable (e.g. running directly on the host) we return
+# `None` and fall back to `psutil`.
+
+
+def _cgroup_memory_percent() -> Optional[float]:
+    """Return container memory usage as *percentage* of the cgroup limit or `None` when not
+    running inside a memory-limited cgroup."""
+
+    def _read(path: str) -> Optional[int]:
+        try:
+            with open(path, "r", encoding="utf-8") as fh:
+                raw = fh.read().strip()
+                if raw == "" or raw.lower() == "max":  # v2 "max" means unlimited
+                    return None
+                return int(raw)
+        except (FileNotFoundError, PermissionError, ValueError):  # pragma: no cover
+            return None
+
+    # cgroups v2 (unified)
+    usage = _read("/sys/fs/cgroup/memory.current")
+    limit = _read("/sys/fs/cgroup/memory.max")
+    if usage is not None and limit and limit > 0:
+        return usage / limit * 100
+
+    # cgroups v1
+    usage = _read("/sys/fs/cgroup/memory/memory.usage_in_bytes")
+    limit = _read("/sys/fs/cgroup/memory/memory.limit_in_bytes")
+    if (
+        usage is not None and limit and 0 < limit < (1 << 60)
+    ):  # ignore enormous "unlimited" value
+        return usage / limit * 100
+
+    return None
+
+
+def _system_memory_percent() -> float:
+    """Best-effort *current* memory usage percentage for the running worker.
+
+    1. Use cgroup metrics when they are available and meaningful.
+    2. Fall back to host-wide `psutil.virtual_memory().percent` otherwise."""
+
+    cgroup_percent = _cgroup_memory_percent()
+    if cgroup_percent is not None:
+        return cgroup_percent
+
+    # Fall back to host memory usage
+    return psutil.virtual_memory().percent

fides/common/api/scope_registry.py

@@ -51,6 +51,7 @@ PRIVACY_REQUEST_ACCESS_RESULTS = "privacy-request-access-results"
 PRIVACY_REQUEST_EMAIL_INTEGRATIONS = "privacy-request-email-integrations"
 PRIVACY_REQUEST_NOTIFICATIONS = "privacy-request-notifications"
 READ = "read"
+READ_OWN = "read-own"
 REGISTER = "register"
 RESET = "reset"
 RESPOND = "respond"
@@ -226,6 +227,7 @@ TAXONOMY_DELETE = f"{TAXONOMY}:{DELETE}"
 USER_CREATE = f"{USER}:{CREATE}"
 USER_DELETE = f"{USER}:{DELETE}"
 USER_READ = f"{USER}:{READ}"
+USER_READ_OWN = f"{USER}:{READ_OWN}"
 USER_UPDATE = f"{USER}:{UPDATE}"
 USER_PASSWORD_RESET = f"{USER}:{PASSWORD_RESET}"
 
@@ -354,6 +356,7 @@ SCOPE_DOCS = {
     USER_UPDATE: "Update users",
     USER_DELETE: "Remove users",
     USER_READ: "View users",
+    USER_READ_OWN: "View own user",
     USER_PASSWORD_RESET: "Reset another user's password",
     USER_PERMISSION_CREATE: "Create user permissions",
     USER_PERMISSION_UPDATE: "Update user permissions",

fides/common/api/v1/urn_registry.py

@@ -93,7 +93,7 @@ PRIVACY_REQUEST_ACCESS_RESULTS = "/privacy-request/{privacy_request_id}/access-r
 PRIVACY_REQUEST_FILTERED_RESULTS = (
     "/privacy-request/{privacy_request_id}/filtered-results"
 )
-
+PRIVACY_REQUEST_FINALIZE = "/privacy-request/{privacy_request_id}/finalize"
 PRIVACY_REQUEST_VERIFY_IDENTITY = "/privacy-request/{privacy_request_id}/verify"
 PRIVACY_REQUEST_RESUME = "/privacy-request/{privacy_request_id}/resume"
 PRIVACY_REQUEST_NOTIFICATIONS = "/privacy-request/notification"

fides/config/execution_settings.py

@@ -57,10 +57,18 @@ class ExecutionSettings(FidesSettings):
         default=300,
         description="Seconds between polling for interrupted tasks to requeue",
     )
+    privacy_request_requeue_retry_count: int = Field(
+        default=3,
+        description="The number of times a privacy request will be requeued when its tasks are interrupted before being marked as error",
+    )
     use_dsr_3_0: bool = Field(
         default=False,
         description="Temporary flag to switch to using DSR 3.0 to process your tasks.",
     )
+    erasure_request_finalization_required: bool = Field(
+        default=False,
+        description="Whether erasure requests require an additional finalization step after all collections have been executed.",
+    )
     fuzzy_search_enabled: bool = Field(
         default=True,
         description="Whether fuzzy search is enabled for privacy request lookups.",
@@ -73,4 +81,8 @@ class ExecutionSettings(FidesSettings):
         default="US/Eastern",
         description="The timezone to send batch emails for DSR email integration.",
     )
+    memory_watchdog_enabled: bool = Field(
+        default=False,
+        description="Whether the memory watchdog is enabled to monitor and gracefully terminate tasks that approach memory limits.",
+    )
     model_config = SettingsConfigDict(env_prefix=ENV_PREFIX)

fides/config/utils.py

@@ -61,6 +61,8 @@ CONFIG_KEY_ALLOWLIST = {
         "task_retry_backoff",
         "require_manual_request_approval",
         "subject_identity_verification_required",
+        "memory_watchdog_enabled",
+        "sql_dry_run",
     ],
     "storage": [
         "active_default_storage_type",

fides/service/privacy_request/privacy_request_service.py

@@ -193,13 +193,18 @@ class PrivacyRequestService:
 
             cache_data(
                 privacy_request,
-                policy,
                 privacy_request_data.identity,
                 privacy_request_data.encryption_key,
                 None,
                 privacy_request_data.custom_privacy_request_fields,
             )
 
+            if masking_secrets := policy.generate_masking_secrets():
+                logger.info(
+                    "Caching masking secrets for privacy request {}", privacy_request.id
+                )
+                privacy_request.persist_masking_secrets(masking_secrets)
+
             check_and_dispatch_error_notifications(db=self.db)
 
             _handle_notifications_and_processing(

fides/ui-build/static/admin/404.html

@@ -1 +1 @@
-<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link data-next-font="" rel="preconnect" href="/" crossorigin="anonymous"/><link rel="preload" href="/_next/static/css/2cadb5f62dcd7c2b.css" as="style"/><link rel="stylesheet" href="/_next/static/css/2cadb5f62dcd7c2b.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-ff0cd6bff75588da.js" defer=""></script><script src="/_next/static/chunks/framework-c92fc3344e6fd165.js" defer=""></script><script src="/_next/static/chunks/main-090643377c8254e6.js" defer=""></script><script src="/_next/static/chunks/pages/_app-39ccb07327c2c5d5.js" defer=""></script><script src="/_next/static/chunks/pages/404-aece2c920ea14514.js" defer=""></script><script src="/_next/static/8108ANFxs99VY7KZ_Xev2/_buildManifest.js" defer=""></script><script src="/_next/static/8108ANFxs99VY7KZ_Xev2/_ssgManifest.js" defer=""></script><style>.data-ant-cssinjs-cache-path{content:"";}</style></head><body><div id="__next"><div style="height:100%;display:flex"></div></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{}},"page":"/404","query":{},"buildId":"8108ANFxs99VY7KZ_Xev2","nextExport":true,"autoExport":true,"isFallback":false,"scriptLoader":[]}</script></body></html>
+<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link data-next-font="" rel="preconnect" href="/" crossorigin="anonymous"/><link rel="preload" href="/_next/static/css/d9924caa849931b3.css" as="style"/><link rel="stylesheet" href="/_next/static/css/d9924caa849931b3.css" data-n-g=""/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-42372ed130431b0a.js"></script><script src="/_next/static/chunks/webpack-90e8ec1fc5c6455b.js" defer=""></script><script src="/_next/static/chunks/framework-c92fc3344e6fd165.js" defer=""></script><script src="/_next/static/chunks/main-090643377c8254e6.js" defer=""></script><script src="/_next/static/chunks/pages/_app-750d6bd16c971bb9.js" defer=""></script><script src="/_next/static/chunks/pages/404-2d803dab6a00f353.js" defer=""></script><script src="/_next/static/MNlh9olWjgbqAHKyQY3LF/_buildManifest.js" defer=""></script><script src="/_next/static/MNlh9olWjgbqAHKyQY3LF/_ssgManifest.js" defer=""></script><style>.data-ant-cssinjs-cache-path{content:"";}</style></head><body><div id="__next"><div style="height:100%;display:flex"></div></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{}},"page":"/404","query":{},"buildId":"MNlh9olWjgbqAHKyQY3LF","nextExport":true,"autoExport":true,"isFallback":false,"scriptLoader":[]}</script></body></html>

fides/ui-build/static/admin/_next/static/MNlh9olWjgbqAHKyQY3LF/_buildManifest.js

@@ -0,0 +1 @@
+self.__BUILD_MANIFEST=function(s,e,t,a,c,n,i,d,o,r,p,u,g,f,m,j,b,k,h,y,l,v,I,F,x,_,U,w,q,N,A,S,B,C,z,D,E,L,M,T,P,G,H,J,K,O,Q){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":[I,"static/chunks/pages/index-fbf9b845bb901238.js"],"/404":["static/chunks/pages/404-2d803dab6a00f353.js"],"/_error":["static/chunks/pages/_error-bede3a8288930dcf.js"],"/add-systems":[I,"static/chunks/pages/add-systems-0902f0bb4080643e.js"],"/add-systems/manual":[s,e,t,c,p,a,i,u,b,F,x,"static/chunks/pages/add-systems/manual-2a655ff3a97f2492.js"],"/add-systems/multiple":[i,g,_,"static/chunks/pages/add-systems/multiple-8ff7f37913ad736a.js"],"/consent":["static/chunks/pages/consent-e17c56eec8d91371.js"],"/consent/configure":[i,g,"static/chunks/pages/consent/configure-0e1ca0f4c8e7f4da.js"],"/consent/configure/add-vendors":[i,g,_,"static/chunks/pages/consent/configure/add-vendors-d00c9034cdeb0236.js"],"/consent/privacy-experience":[p,U,"static/chunks/pages/consent/privacy-experience-21f997c69fc3b4c2.js"],"/consent/privacy-experience/new":[s,d,f,m,w,"static/chunks/pages/consent/privacy-experience/new-e74cb5ea87f15b40.js"],"/consent/privacy-experience/[id]":[s,d,f,m,w,"static/chunks/pages/consent/privacy-experience/[id]-f22ddd9b48a5c418.js"],"/consent/privacy-notices":[U,"static/chunks/pages/consent/privacy-notices-ad105181bc91209b.js"],"/consent/privacy-notices/new":[s,d,f,m,q,"static/chunks/pages/consent/privacy-notices/new-a57d251c88ce68ae.js"],"/consent/privacy-notices/[id]":[s,d,f,m,q,"static/chunks/pages/consent/privacy-notices/[id]-da4124b7600a2a1d.js"],"/consent/properties":[N,"static/chunks/pages/consent/properties-057cad65e7414a44.js"],"/consent/reporting":["static/chunks/2150-930ffaf2c4718edc.js","static/chunks/pages/consent/reporting-b0c4235fe6d0b0c8.js"],"/data-catalog":[s,e,t,a,"static/css/95ac327e5d70148d.css","static/chunks/pages/data-catalog-7770a8dc34bd0fc0.js"],"/data-catalog/[systemId]/projects":[s,e,t,a,k,n,"static/chunks/pages/data-catalog/[systemId]/projects-29784a11fe0fbd0a.js"],"/data-catalog/[systemId]/projects/[projectUrn]":[A,"static/chunks/pages/data-catalog/[systemId]/projects/[projectUrn]-80a6cc8e8573514a.js"],"/data-catalog/[systemId]/projects/[projectUrn]/[resourceUrn]":[s,e,t,a,k,S,n,"static/chunks/pages/data-catalog/[systemId]/projects/[projectUrn]/[resourceUrn]-aad6047a4604b945.js"],"/data-catalog/[systemId]/resources":[A,"static/chunks/pages/data-catalog/[systemId]/resources-6c3714ee97a718c1.js"],"/data-catalog/[systemId]/resources/[resourceUrn]":[s,e,t,a,k,S,n,"static/chunks/pages/data-catalog/[systemId]/resources/[resourceUrn]-b6b98cea25dd94fa.js"],"/data-discovery/action-center":[h,"static/chunks/pages/data-discovery/action-center-ee3c0a103346fc06.js"],"/data-discovery/action-center/[monitorId]":[s,e,t,h,B,y,"static/chunks/pages/data-discovery/action-center/[monitorId]-92b0bd97d8e79340.js"],"/data-discovery/action-center/[monitorId]/[systemId]":[s,e,t,i,b,h,B,"static/css/23cf870196941c9a.css","static/chunks/pages/data-discovery/action-center/[monitorId]/[systemId]-3e5725cd06d7fe6c.js"],"/data-discovery/activity":[r,"static/chunks/pages/data-discovery/activity-ad6a84a6276f914c.js"],"/data-discovery/detection":[r,C,"static/chunks/pages/data-discovery/detection-2822a423a7ad0550.js"],"/data-discovery/detection/[resourceUrn]":[r,C,"static/chunks/pages/data-discovery/detection/[resourceUrn]-31e6c54794a9883e.js"],"/data-discovery/discovery":[s,e,t,a,r,z,n,"static/chunks/pages/data-discovery/discovery-56eb4c014f0d96a3.js"],"/data-discovery/discovery/[resourceUrn]":[s,e,t,a,r,z,n,"static/chunks/pages/data-discovery/discovery/[resourceUrn]-f98dd251babb7e28.js"],"/datamap":[t,"static/chunks/255-1bc0cbef7a59cdc6.js",u,D,"static/chunks/pages/datamap-d23b3ae139f0428b.js"],"/dataset":[o,j,"static/chunks/pages/dataset-f3348d0a92543bab.js"],"/dataset/new":[o,j,"static/chunks/pages/dataset/new-0d50084fbdf9b84c.js"],"/dataset/[datasetId]":["static/chunks/9729-fcf6ff4e3534e4a8.js",l,"static/chunks/pages/dataset/[datasetId]-a8e8b5f4ee7af86c.js"],"/dataset/[datasetId]/[collectionName]":[s,e,t,c,a,l,n,"static/chunks/pages/dataset/[datasetId]/[collectionName]-0fa72873e464f581.js"],"/dataset/[datasetId]/[collectionName]/[...subfieldNames]":[s,e,t,c,a,l,n,"static/chunks/pages/dataset/[datasetId]/[collectionName]/[...subfieldNames]-15301bd6bf7cf718.js"],"/datastore-connection":["static/css/5f393dea1c0d031c.css","static/chunks/pages/datastore-connection-3bd77864da523d41.js"],"/datastore-connection/new":[s,c,o,p,E,j,L,"static/chunks/pages/datastore-connection/new-c6614583b14dc9f2.js"],"/datastore-connection/[id]":[s,c,o,E,j,L,"static/chunks/pages/datastore-connection/[id]-7d6027570d05c57f.js"],"/fides-js-docs":["static/chunks/2fbcc6de-a6c61724c327e9fa.js","static/chunks/e3251fe7-5777b5d778e6fffa.js",s,e,t,c,o,"static/chunks/5619-9b50cec521203989.js",M,"static/css/ab65b8cc3144bfc8.css","static/chunks/5596-4378b2927dae65b2.js","static/chunks/pages/fides-js-docs-1f4335dca5c09860.js"],"/integrations":[s,e,t,c,d,T,P,n,"static/chunks/pages/integrations-7f15cd8538cdc24d.js"],"/integrations/[id]":[s,e,t,c,d,T,P,n,"static/chunks/pages/integrations/[id]-8e346fb36e8034d2.js"],"/login":["static/chunks/pages/login-0cb0eb44bf2dd24c.js"],"/login/[provider]":["static/chunks/pages/login/[provider]-c58beef131c3a82d.js"],"/messaging":[s,e,"static/chunks/346-aa3b88efb85f2e28.js","static/chunks/pages/messaging-1bae386d8c190348.js"],"/messaging/add-template":[G,"static/chunks/pages/messaging/add-template-feca66ad5c5fe54a.js"],"/messaging/[id]":[G,"static/chunks/pages/messaging/[id]-5627d0d0668077f9.js"],"/poc/ant-components":["static/chunks/pages/poc/ant-components-64a322d01aae5ca7.js"],"/poc/form-experiments/AntForm":["static/chunks/pages/poc/form-experiments/AntForm-8bca16a7726e7eb2.js"],"/poc/form-experiments/FormikAntFormItem":["static/chunks/pages/poc/form-experiments/FormikAntFormItem-b0f246fc3b67ebf7.js"],"/poc/form-experiments/FormikControlled":["static/chunks/pages/poc/form-experiments/FormikControlled-1a0852b090bfc392.js"],"/poc/form-experiments/FormikField":["static/chunks/pages/poc/form-experiments/FormikField-11f3de1b45e36583.js"],"/poc/form-experiments/FormikSpreadField":[H,"static/chunks/pages/poc/form-experiments/FormikSpreadField-af097d661f6abcf4.js"],"/poc/forms":[H,"static/chunks/pages/poc/forms-1b73a1c2b6c6285f.js"],"/poc/table-migration":[i,g,"static/chunks/pages/poc/table-migration-05616e2ae20ff4f8.js"],"/privacy-requests":[s,"static/chunks/3550-d04125c828d591a1.js",J,"static/chunks/pages/privacy-requests-96a08c4431b5462c.js"],"/privacy-requests/configure":["static/chunks/pages/privacy-requests/configure-e551a860ec727802.js"],"/privacy-requests/configure/messaging":["static/chunks/pages/privacy-requests/configure/messaging-f1d818242d8550f8.js"],"/privacy-requests/configure/storage":["static/chunks/pages/privacy-requests/configure/storage-d40a26bddb126c5c.js"],"/privacy-requests/[id]":[J,"static/css/8bc1833f1fa53ff0.css","static/chunks/pages/privacy-requests/[id]-79f1576b1126975c.js"],"/properties":[N,"static/chunks/pages/properties-e959378bb32b6b73.js"],"/properties/add-property":[K,"static/chunks/pages/properties/add-property-0bdbc1fcbf553b8f.js"],"/properties/[id]":[K,"static/chunks/pages/properties/[id]-dd99183f93763ae4.js"],"/reporting/datamap":[s,e,t,M,u,D,"static/chunks/pages/reporting/datamap-9d1840f8309b706e.js"],"/settings/about":["static/chunks/pages/settings/about-37ba24a72a06862e.js"],"/settings/about/alpha":["static/chunks/pages/settings/about/alpha-1066f0c202ef744c.js"],"/settings/consent":["static/chunks/pages/settings/consent-f61b87e79367865b.js"],"/settings/consent/[configuration_id]/[purpose_id]":["static/chunks/pages/settings/consent/[configuration_id]/[purpose_id]-e891d01ece59669e.js"],"/settings/custom-fields":["static/chunks/pages/settings/custom-fields-f8eea5d508c60c64.js"],"/settings/domain-records":["static/chunks/pages/settings/domain-records-51333dbd21cb37c8.js"],"/settings/domains":["static/chunks/pages/settings/domains-bde86e5f6c09da5a.js"],"/settings/email-templates":["static/chunks/pages/settings/email-templates-4f9a5cc8bea7725b.js"],"/settings/locations":[O,y,"static/chunks/pages/settings/locations-ed6a140b362c5baa.js"],"/settings/organization":["static/chunks/pages/settings/organization-ff9a34264d48c35f.js"],"/settings/regulations":[O,y,"static/chunks/pages/settings/regulations-102efd9199e87124.js"],"/systems":["static/chunks/pages/systems-c05b49ddec1a1b4f.js"],"/systems/configure/[id]":[s,e,t,c,p,a,i,u,b,F,x,"static/chunks/pages/systems/configure/[id]-c8f5fbaa83dd9945.js"],"/systems/configure/[id]/test-datasets":[o,"static/chunks/pages/systems/configure/[id]/test-datasets-a4b6d41ca679298b.js"],"/taxonomy":["static/chunks/678d4732-50255cc09048e643.js",s,e,d,"static/chunks/6148-59a59d5c5925344f.js","static/css/34a7eb08b86ddb57.css","static/chunks/pages/taxonomy-df0d88716578e295.js"],"/user-management":[v,"static/chunks/pages/user-management-e98dfc7d4f2a4e16.js"],"/user-management/new":[v,Q,"static/chunks/pages/user-management/new-de8cb3739ab99c09.js"],"/user-management/profile/[id]":[v,Q,"static/chunks/pages/user-management/profile/[id]-da68efc31998dc66.js"],sortedPages:["/","/404","/_app","/_error","/add-systems","/add-systems/manual","/add-systems/multiple","/consent","/consent/configure","/consent/configure/add-vendors","/consent/privacy-experience","/consent/privacy-experience/new","/consent/privacy-experience/[id]","/consent/privacy-notices","/consent/privacy-notices/new","/consent/privacy-notices/[id]","/consent/properties","/consent/reporting","/data-catalog","/data-catalog/[systemId]/projects","/data-catalog/[systemId]/projects/[projectUrn]","/data-catalog/[systemId]/projects/[projectUrn]/[resourceUrn]","/data-catalog/[systemId]/resources","/data-catalog/[systemId]/resources/[resourceUrn]","/data-discovery/action-center","/data-discovery/action-center/[monitorId]","/data-discovery/action-center/[monitorId]/[systemId]","/data-discovery/activity","/data-discovery/detection","/data-discovery/detection/[resourceUrn]","/data-discovery/discovery","/data-discovery/discovery/[resourceUrn]","/datamap","/dataset","/dataset/new","/dataset/[datasetId]","/dataset/[datasetId]/[collectionName]","/dataset/[datasetId]/[collectionName]/[...subfieldNames]","/datastore-connection","/datastore-connection/new","/datastore-connection/[id]","/fides-js-docs","/integrations","/integrations/[id]","/login","/login/[provider]","/messaging","/messaging/add-template","/messaging/[id]","/poc/ant-components","/poc/form-experiments/AntForm","/poc/form-experiments/FormikAntFormItem","/poc/form-experiments/FormikControlled","/poc/form-experiments/FormikField","/poc/form-experiments/FormikSpreadField","/poc/forms","/poc/table-migration","/privacy-requests","/privacy-requests/configure","/privacy-requests/configure/messaging","/privacy-requests/configure/storage","/privacy-requests/[id]","/properties","/properties/add-property","/properties/[id]","/reporting/datamap","/settings/about","/settings/about/alpha","/settings/consent","/settings/consent/[configuration_id]/[purpose_id]","/settings/custom-fields","/settings/domain-records","/settings/domains","/settings/email-templates","/settings/locations","/settings/organization","/settings/regulations","/systems","/systems/configure/[id]","/systems/configure/[id]/test-datasets","/taxonomy","/user-management","/user-management/new","/user-management/profile/[id]"]}}("static/chunks/8765-f622a35b40a7ec63.js","static/chunks/9278-08cc704317fe535e.js","static/chunks/5163-e682273cd76a7d07.js","static/chunks/409-ea70638a59296659.js","static/chunks/699-8ca44b0de9fa20f0.js","static/css/d2d4e9a6923e6730.css","static/chunks/401-3cc1fee61494e3bd.js","static/chunks/3662-f6a1ddca5ee42076.js","static/chunks/6527-0eed08abe252a918.js","static/chunks/431-1db919f6569a4021.js","static/chunks/5277-e8a036319456127f.js","static/chunks/9951-7c6639e5d062779e.js","static/chunks/3923-13a6b4da2d51bf8f.js","static/chunks/6419-d0c00d661b01f8fa.js","static/chunks/6084-ddbad3149364725d.js","static/chunks/5574-9312f97b637d9ee2.js","static/chunks/6780-b42a27e72707936d.js","static/chunks/6882-59ea739e3616ce83.js","static/chunks/7725-539d3a906f627531.js","static/css/10994e916bc9a00a.css","static/chunks/9226-2dcac54ab3fb94be.js","static/chunks/7476-cc0d9a94ed7aad53.js","static/css/972dc7eef106ee7c.css","static/chunks/3450-69f4e16978971bb8.js","static/css/304c6f148886a8d4.css","static/chunks/796-3bdda2a7868464af.js","static/chunks/6853-d0190d2cca9dbde2.js","static/chunks/1817-b78b58ae3b75d75a.js","static/chunks/6954-ba98e778a5b45ebf.js","static/chunks/79-2aab56be75e16187.js","static/chunks/3872-0a0f0032ca39a93f.js","static/chunks/3855-509ca7ac99b5eada.js","static/chunks/8735-40caf91800a3610c.js","static/chunks/5309-d9a488457898263b.js","static/chunks/9046-7085a401297c5520.js","static/chunks/4230-114e31621c19ea69.js","static/chunks/1467-8808ec8836e033f9.js","static/chunks/4608-f16f281f2d05d963.js","static/chunks/9187-7438242f0d380bb0.js","static/chunks/1316-2606e19807c08aa5.js","static/chunks/6662-a9e54ead3dc53644.js","static/chunks/7630-b1c93688013ef013.js","static/chunks/2921-86f1547ac40a5cdf.js","static/chunks/203-cd78ea279cecba60.js","static/chunks/787-c57185ad89c4e288.js","static/chunks/9826-3c578665c6d3b21d.js","static/chunks/4121-877e19d3fa078c7b.js"),self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();