[Developer] #573 normalize vector access whitelist

2026-06-30 16:33:59 +09:00
parent a9c58fa854
commit e0fbf1e0c5
8 changed files with 234 additions and 43 deletions
--- a/src/test/java/com/cloudhandson/vpdbackoffice/service/OrdsProbeServiceTest.java
+++ b/src/test/java/com/cloudhandson/vpdbackoffice/service/OrdsProbeServiceTest.java
@@ -23,4 +23,16 @@ class OrdsProbeServiceTest {
        .contains("ROWNUM <= LEAST(GREATEST(NVL(:row_limit, 10), 1), 100)")
        .doesNotContain("Bearer", "0.10", "0.20");
  }
+
+  @Test
+  void omitsNoopAllowAllPredicateFromVectorEffectiveSql() {
+    ProtectedObject object = new ProtectedObject(
+        5L, "ADMIN", "CB_VECTOR_SEARCH_DOCUMENTS", "cb-agent-vector/search", "Y");
+
+    String sql = OrdsProbeService.vectorEffectiveSql(object, "  1 = 1  ");
+
+    assertThat(sql)
+        .contains("WHERE d.embedding IS NOT NULL ORDER BY score")
+        .doesNotContain("AND (1 = 1)", "REGEXP_LIKE");
+  }
 }