Function checkAndGetDataSourceQueriable

backend/api/v1/sql_service.go:2268–2325

(
	ctx context.Context,
	storeInstance *store.Store,
	licenseService *enterprise.LicenseService,
	database *store.DatabaseMessage,
	dataSourceID string,
)

}

func checkAndGetDataSourceQueriable(
	ctx context.Context,
	storeInstance *store.Store,
	licenseService *enterprise.LicenseService,
	database *store.DatabaseMessage,
	dataSourceID string,
) (*storepb.DataSource, error) {
	if dataSourceID == "" {
		return nil, connect.NewError(connect.CodeInvalidArgument, errors.Errorf("data source id is required"))
	}

	instance, err := storeInstance.GetInstance(ctx, &store.FindInstanceMessage{Workspace: common.GetWorkspaceIDFromContext(ctx), ResourceID: &database.InstanceID})
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, errors.Errorf("failed to get instance %v with error: %v", database.InstanceID, err.Error()))
	}
	if instance == nil {
		return nil, connect.NewError(connect.CodeNotFound, errors.Errorf("instance %q not found", database.InstanceID))
	}
	dataSource := func() *storepb.DataSource {
		for _, ds := range instance.Metadata.GetDataSources() {
			if ds.GetId() == dataSourceID {
				return ds
			}
		}
		return nil
	}()
	if dataSource == nil {
		return nil, connect.NewError(connect.CodeNotFound, errors.Errorf("data source %q not found", dataSourceID))
	}

	// Always allow non-admin data source.
	if dataSource.GetType() != storepb.DataSourceType_ADMIN {
		if err := licenseService.IsFeatureEnabledForInstance(ctx, common.GetWorkspaceIDFromContext(ctx), v1pb.PlanFeature_FEATURE_INSTANCE_READ_ONLY_CONNECTION, instance); err != nil {
			return nil, connect.NewError(connect.CodePermissionDenied, errors.New(err.Error()))
		}
		return dataSource, nil
	}

	//nolint:nilerr
	if err := licenseService.IsFeatureEnabled(ctx, common.GetWorkspaceIDFromContext(ctx), v1pb.PlanFeature_FEATURE_QUERY_POLICY); err != nil {
		return dataSource, nil
	}

	queryDataPolicy, err := storeInstance.GetEffectiveQueryDataPolicy(ctx, common.GetWorkspaceIDFromContext(ctx), common.FormatProject(database.ProjectID))
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, errors.Errorf("failed to get query data policy with error: %v", err.Error()))
	}

	if queryDataPolicy.AllowAdminDataSource {
		return dataSource, nil
	}

	ds := utils.DataSourceFromInstanceWithType(instance, storepb.DataSourceType_READ_ONLY)
	if ds != nil {
		return nil, connect.NewError(connect.CodePermissionDenied, errors.Errorf("data source %q is not queryable", dataSourceID))
	}
	return dataSource, nil
}