Method accessCheck

backend/api/v1/sql_service.go:1503–1515

The Build*Func parser-context helpers moved to `backend/component/parsercontext` so the runner layer can use them without an import cycle. See parsercontext.BuildGetDatabaseMetadataFunc, BuildListDatabaseNamesFunc, BuildGetLinkedDatabaseMetadataFunc. accessCheck check the access for the database. Do

(
	ctx context.Context,
	instance *store.InstanceMessage,
	database *store.DatabaseMessage,
	user *store.UserMessage,
	spans []*parserbase.QuerySpan,
	isExplain bool,
	statements []parserbase.Statement,
	requestSchema string,
	multiStatement bool,
)

// accessCheck check the access for the database. Do not support cross-project resources.
func (s *SQLService) accessCheck(
	ctx context.Context,
	instance *store.InstanceMessage,
	database *store.DatabaseMessage,
	user *store.UserMessage,
	spans []*parserbase.QuerySpan,
	isExplain bool,
	statements []parserbase.Statement,
	requestSchema string,
	multiStatement bool,
) error {
	return s.accessCheckWithGrantedTargets(ctx, instance, database, user, spans, isExplain, statements, nil, requestSchema, multiStatement)
}

// accessCheckWithGrant returns an accessCheckFunc that exempts the access
// grant's target databases from IAM checks while keeping span-level checks for