Function preExecuteMaskingCheck

backend/api/v1/document_masking.go:58–73

--------------------------------------------------------------------------- Shared helpers --------------------------------------------------------------------------- preExecuteMaskingCheck runs engine-specific pre-execution checks that block queries with unsupported APIs. Sensitive predicate checks

(
	ctx context.Context,
	stores *store.Store,
	engine storepb.Engine,
	database *store.DatabaseMessage,
	spans []*parserbase.QuerySpan,
)

// queries with unsupported APIs. Sensitive predicate checks are handled
// post-execution on a per-statement basis by checkSensitivePredicates.
func preExecuteMaskingCheck(
	ctx context.Context,
	stores *store.Store,
	engine storepb.Engine,
	database *store.DatabaseMessage,
	spans []*parserbase.QuerySpan,
) error {
	switch engine {
	case storepb.Engine_MONGODB:
		return preExecuteMaskingCheckMongoDB(ctx, stores, database, spans)
	case storepb.Engine_ELASTICSEARCH:
		return preExecuteMaskingCheckElasticsearch(ctx, stores, database, spans)
	default:
		return nil
	}
}

func preExecuteMaskingCheckMongoDB(
	ctx context.Context,