feat(policy)!: add namespaced actions schema and namespace-aware action queries by elizabethhealy · Pull Request #3154 · opentdf/platform

elizabethhealy · 2026-03-12T17:56:16Z

Proposed Changes

This PR introduces the platform DB/service groundwork for namespaced Actions.

It adds schema support for namespace-scoped custom actions, updates action query behavior to resolve by namespace context, and keeps legacy custom actions fully backward-compatible during migration.

What changed

Added actions.namespace_id (nullable) with FK to attribute_namespaces.
Replaced global unique-name constraint with partial unique indexes:
- (namespace_id, name) for namespaced rows
- (name) where namespace_id IS NULL for legacy/global rows
Added index on actions.namespace_id for namespace-scoped lookup/list performance.
Updated action SQL queries (create/get/list) to support namespace_id and namespace_fqn.
Updated DB action logic to:
- include namespace on returned policy.Action
- resolve GetAction(name) within provided namespace
- enforce standard action immutability protections for create/rename/delete paths
Regenerated sqlc outputs using CI-aligned sqlc v1.30.0.

Backward compatibility

Yes — legacy custom actions are still supported.

Existing custom actions with namespace_id = NULL remain valid and usable.
GetAction/ListActions name-scoped behavior still resolves legacy rows.
For namespaced requests, legacy actions are projected with the requested namespace context in responses (so clients receive namespace data as expected).
The migration is non-breaking: no forced backfill of existing action rows in this PR.

Checklist

I have added or updated unit tests
I have added or updated integration tests (if appropriate)
I have added or updated documentation

Testing Instructions

gemini-code-assist · 2026-03-12T17:56:39Z

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request introduces fundamental support for namespacing within the policy actions database. This change allows actions to be logically separated and managed within distinct namespaces, which is crucial for multi-tenant environments or organizational partitioning. The database schema has been updated, and the core API methods for managing actions now incorporate namespace awareness, ensuring that actions are correctly scoped and resolved.

Highlights

Introduced Namespacing for Actions: The actions database table now includes a namespace_id column, enabling actions to be scoped to specific namespaces.
Updated Unique Constraints: Database unique constraints for action names have been modified to support global uniqueness for standard/legacy actions and per-namespace uniqueness for custom actions.
Enhanced Action Management APIs: CreateAction, ListActions, and GetAction APIs have been updated to accept NamespaceId or NamespaceFqn parameters, allowing for namespace-aware operations.
Improved Action Resolution Logic: The getAction and listActions queries now prioritize actions within a specified namespace, falling back to global actions if no namespace-specific action is found.
Comprehensive Test Coverage: New integration tests were added and existing ones modified to validate the correct behavior of namespaced actions across creation, listing, and retrieval operations, including handling of legacy actions.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog

service/integration/actions_test.go
- Added helper functions for namespace IDs and FQNs.
- Updated existing tests to include NamespaceId in requests.
- Introduced new tests for namespaced action filtering, legacy action namespace projection, and namespaced create/list/get operations.
service/policy/db/actions.go
- Modified GetAction, ListActions, CreateAction, UpdateAction, and DeleteAction to handle NamespaceId and NamespaceFqn parameters.
- Added logic to hydrate namespace information into returned action objects.
service/policy/db/actions.sql.go
- Regenerated SQL query code to reflect changes in createCustomAction, createOrListActionsByName, getAction, and listActions for namespace support.
service/policy/db/migrations/20260312000000_add_namespace_to_actions.sql
- Added a new migration to introduce the namespace_id column to the actions table.
- Updated unique constraints to support namespaced and global actions.
service/policy/db/models.go
- Updated the Action struct to include a NamespaceID field.
service/policy/db/queries/actions.sql
- Modified the raw SQL queries for listActions, getAction, createOrListActionsByName, and createCustomAction to incorporate namespace filtering, resolution, and creation logic.

Activity

No human activity has been recorded on this pull request yet.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	`/gemini review`	Performs a code review for the current pull request in its current state.
Pull Request Summary	`/gemini summary`	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	`/gemini help`	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

New space, new actions, Data flows, now neatly scoped, Order in the code.

Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

gemini-code-assist

Code Review

This pull request introduces namespaced actions, a significant feature involving database schema changes, query updates, and modifications to the Go service layer. The implementation is robust, providing backward compatibility for legacy actions and comprehensive test coverage for the new functionality. My feedback focuses on improving the readability and maintainability of a couple of complex SQL queries.

github-actions · 2026-03-12T18:02:04Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	192.546186ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.467609ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	383.060214ms
Throughput	261.06 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	41.039274942s
Average Latency	408.775309ms
Throughput	121.83 requests/second

github-actions · 2026-03-12T18:08:28Z

X-Test Results

✅ go-pull-3154
✅ go-v0.9.0
✅ java-pull-3154
✅ java-v0.9.0
✅ js-pull-3154
✅ js-v0.9.0
cukes-report
test-cases-mapping-report
bats-test-results
opentdf~~platform~~QLQMEI.dockerbuild

github-actions · 2026-03-12T18:25:53Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	200.381774ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	94.654708ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	381.176551ms
Throughput	262.35 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.021405886s
Average Latency	398.335814ms
Throughput	124.93 requests/second

github-actions · 2026-03-12T18:32:35Z

X-Test Results

✅ go-pull-3154
✅ java-pull-3154
✅ go-v0.9.0
✅ js-pull-3154
✅ java-v0.9.0
✅ js-v0.9.0
test-cases-mapping-report
bats-test-results
cukes-report
opentdf~~platform~~REQMZZ.dockerbuild

github-actions · 2026-03-12T18:39:30Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	200.393919ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	93.948092ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	387.207533ms
Throughput	258.26 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	40.909754367s
Average Latency	407.551936ms
Throughput	122.22 requests/second

github-actions · 2026-03-12T18:46:07Z

X-Test Results

✅ go-pull-3154
✅ go-v0.9.0
✅ java-pull-3154
✅ java-v0.9.0
✅ js-v0.9.0
✅ js-pull-3154
cukes-report
test-cases-mapping-report
bats-test-results
opentdf~~platform~~PJXJ6P.dockerbuild

elizabethhealy · 2026-03-12T18:55:16Z

/gemini review

gemini-code-assist

Code Review

This pull request introduces namespace support for actions, which is a significant and well-executed feature. The database schema changes, including the use of partial unique indexes, are robust. The query logic for handling both namespaced and legacy actions, especially the resolution strategy in getAction, is well-thought-out and ensures backward compatibility. The Go code is updated consistently, and the new integration tests provide good coverage for the new functionality.

I've added a couple of suggestions in the tests to reduce code duplication, which could improve maintainability. Overall, this is a high-quality contribution.

elizabethhealy · 2026-03-12T19:35:15Z

/gemini review

gemini-code-assist

Code Review

This pull request introduces namespacing for actions, a significant and well-implemented feature. The database schema changes, SQL queries, and DB client logic are all updated to support namespace-scoped actions while maintaining backward compatibility for legacy global actions. The new resolution logic for GetAction and ListActions correctly prioritizes namespaced actions over legacy ones. The test suite has been thoroughly updated with new tests covering namespacing, filtering, and resolution logic. I have one suggestion to improve error handling in the DeleteAction function for better accuracy and clarity.

github-actions · 2026-03-12T19:39:41Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	187.958881ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	96.396829ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	378.645013ms
Throughput	264.10 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	38.75612013s
Average Latency	385.963101ms
Throughput	129.01 requests/second

github-actions · 2026-03-12T19:46:34Z

X-Test Results

✅ go-pull-3154
✅ go-v0.9.0
✅ java-pull-3154
✅ js-pull-3154
✅ java-v0.9.0
✅ js-v0.9.0
cukes-report
test-cases-mapping-report
bats-test-results
opentdf~~platform~~4C0PAV.dockerbuild

github-actions · 2026-03-12T19:54:50Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	157.508338ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	80.59578ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	383.433388ms
Throughput	260.80 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	39.023569139s
Average Latency	388.205695ms
Throughput	128.13 requests/second

github-actions · 2026-03-12T20:02:34Z

X-Test Results

✅ go-pull-3154
✅ go-v0.9.0
✅ java-pull-3154
✅ java-v0.9.0
✅ js-pull-3154
✅ js-v0.9.0
cukes-report
test-cases-mapping-report
bats-test-results
opentdf~~platform~~OKFW5I.dockerbuild

alkalescent

lgtm

github-actions · 2026-03-12T22:03:18Z

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	185.78634ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	92.678412ms

Benchmark Statistics

Name	№ Requests	Avg Duration	Min Duration	Max Duration

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	372.89376ms
Throughput	268.17 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	39.801873578s
Average Latency	396.178991ms
Throughput	125.62 requests/second

github-actions · 2026-03-12T22:08:37Z

X-Test Results

✅ go-v0.9.0
✅ java-v0.9.0
✅ go-pull-3154
✅ js-v0.9.0
✅ java-pull-3154
✅ js-pull-3154
cukes-report
test-cases-mapping-report
bats-test-results
opentdf~~platform~~MBG9P0.dockerbuild

🤖 I have created a release *beep* *boop* --- ## [0.14.0](opentdf/platform@service/v0.13.0...service/v0.14.0) (2026-04-21) ### ⚠ BREAKING CHANGES * **sdk:** reclassify KAS 400 errors — distinguish tamper from misconfiguration ([opentdf#3166](opentdf#3166)) * **policy:** optional namespace for RRs ([opentdf#3165](opentdf#3165)) * **policy:** Namespace subject mappings and subject condition sets. ([opentdf#3143](opentdf#3143)) * **policy:** Optional namespace on actions protos, NamespacedPolicy feature flag ([opentdf#3155](opentdf#3155)) * **policy:** add namespaced actions schema and namespace-aware action queries ([opentdf#3154](opentdf#3154)) * **policy:** only require namespace on GetAction if no id provided ([opentdf#3144](opentdf#3144)) * **policy:** add namespace field to Actions proto ([opentdf#3130](opentdf#3130)) * **policy:** namespace Registered Resources ([opentdf#3111](opentdf#3111)) * **policy:** add namespace field to RegisteredResource proto ([opentdf#3110](opentdf#3110)) ### Features * **authz:** Namespaced policy in decisioning ([opentdf#3226](opentdf#3226)) ([0355934](opentdf@0355934)) * **cli:** migrate otdfctl into platform monorepo ([opentdf#3205](opentdf#3205)) ([5177bec](opentdf@5177bec)) * fix tracing ([opentdf#3242](opentdf#3242)) ([57e5680](opentdf@57e5680)) * **policy:** add GetObligationTrigger RPC ([opentdf#3318](opentdf#3318)) ([d68e39d](opentdf@d68e39d)) * **policy:** add namespace field to Actions proto ([opentdf#3130](opentdf#3130)) ([bedc9b3](opentdf@bedc9b3)) * **policy:** add namespace field to RegisteredResource proto ([opentdf#3110](opentdf#3110)) ([04fd85d](opentdf@04fd85d)) * **policy:** add namespaced actions schema and namespace-aware action queries ([opentdf#3154](opentdf#3154)) ([c0443f1](opentdf@c0443f1)) * **policy:** add sort ListSubjectMappings API ([opentdf#3255](opentdf#3255)) ([9d5d757](opentdf@9d5d757)) * **policy:** Add sort support listregisteredresources api ([opentdf#3312](opentdf#3312)) ([91a3ff3](opentdf@91a3ff3)) * **policy:** add sort support to ListAttributes API ([opentdf#3223](opentdf#3223)) ([ec3312f](opentdf@ec3312f)) * **policy:** add sort support to ListKeyAccessServer ([opentdf#3287](opentdf#3287)) ([7fae2d7](opentdf@7fae2d7)) * **policy:** Add sort support to ListNamespaces API ([opentdf#3192](opentdf#3192)) ([aac86cd](opentdf@aac86cd)) * **policy:** add sort support to listobligations api ([opentdf#3300](opentdf#3300)) ([9221cac](opentdf@9221cac)) * **policy:** add sort support to ListSubjectConditionSets API ([opentdf#3272](opentdf#3272)) ([9010f12](opentdf@9010f12)) * **policy:** add SortField proto and update PageRequest for sort support ([opentdf#3187](opentdf#3187)) ([6cf1862](opentdf@6cf1862)) * **policy:** Enforce same namespace when actions referenced downstream ([opentdf#3206](opentdf#3206)) ([4b5463a](opentdf@4b5463a)) * **policy:** namespace Registered Resources ([opentdf#3111](opentdf#3111)) ([6db1883](opentdf@6db1883)) * **policy:** Namespace subject mappings and condition sets ([opentdf#3172](opentdf#3172)) ([6deed50](opentdf@6deed50)) * **policy:** Namespace subject mappings and subject condition sets. ([opentdf#3143](opentdf#3143)) ([3006780](opentdf@3006780)) * **policy:** optional namespace for RRs ([opentdf#3165](opentdf#3165)) ([8948018](opentdf@8948018)) * **policy:** rollback migration strategy for namespaced actions ([opentdf#3235](opentdf#3235)) ([f7e5e01](opentdf@f7e5e01)) * **policy:** Seed existing namespaces with standard actions ([opentdf#3228](opentdf#3228)) ([12136b0](opentdf@12136b0)) * **policy:** Seed namespaces with standard actions on creation + namespaced actions for obligation triggers ([opentdf#3161](opentdf#3161)) ([984d76b](opentdf@984d76b)) ### Bug Fixes * **ci:** Upgrade toolchain version to 1.25.8 ([opentdf#3116](opentdf#3116)) ([e1b7882](opentdf@e1b7882)) * **core:** do not concat slashes directly in url/file paths ([opentdf#3290](opentdf#3290)) ([114c2a7](opentdf@114c2a7)) * **deps:** bump github.com/jackc/pgx/v5 from 5.7.5 to 5.9.0 in /service ([opentdf#3316](opentdf#3316)) ([017362e](opentdf@017362e)) * **deps:** bump github.com/opentdf/platform/lib/identifier from 0.2.0 to 0.3.0 in /service ([opentdf#3162](opentdf#3162)) ([8bc5dcd](opentdf@8bc5dcd)) * **deps:** bump github.com/opentdf/platform/protocol/go from 0.16.0 to 0.17.0 in /service ([opentdf#3125](opentdf#3125)) ([29fec61](opentdf@29fec61)) * **deps:** bump github.com/opentdf/platform/protocol/go from 0.17.0 to 0.21.0 in /service ([opentdf#3220](opentdf#3220)) ([e63add2](opentdf@e63add2)) * **deps:** bump github.com/opentdf/platform/protocol/go from 0.21.0 to 0.22.0 in /service ([opentdf#3248](opentdf#3248)) ([1ebce73](opentdf@1ebce73)) * **deps:** bump github.com/opentdf/platform/protocol/go from 0.22.0 to 0.23.0 in /service ([opentdf#3271](opentdf#3271)) ([3338b8e](opentdf@3338b8e)) * **deps:** bump github.com/opentdf/platform/protocol/go from 0.23.0 to 0.24.0 in /service ([opentdf#3321](opentdf#3321)) ([78e6022](opentdf@78e6022)) * **deps:** bump github.com/opentdf/platform/protocol/go from 0.24.0 to 0.25.0 in /service ([opentdf#3333](opentdf#3333)) ([3940bf8](opentdf@3940bf8)) * **deps:** bump github.com/opentdf/platform/sdk from 0.13.0 to 0.16.0 in /service ([opentdf#3356](opentdf#3356)) ([5617077](opentdf@5617077)) * **deps:** bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.42.0 to 1.43.0 in /service ([opentdf#3282](opentdf#3282)) ([046374a](opentdf@046374a)) * **deps:** bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0 in /service ([opentdf#3281](opentdf#3281)) ([56b33f2](opentdf@56b33f2)) * **deps:** bump google.golang.org/grpc from 1.77.0 to 1.79.3 in /service ([opentdf#3176](opentdf#3176)) ([3289502](opentdf@3289502)) * **deps:** remove direct github.com/docker/docker dependency ([opentdf#3229](opentdf#3229)) ([2becb27](opentdf@2becb27)) * **deps:** upgrade testcontainers-go to resolve vulns ([opentdf#3299](opentdf#3299)) ([72c6f9b](opentdf@72c6f9b)) * **ers:** include standard JWT claims in claims mode entity resolution ([opentdf#3196](opentdf#3196)) ([6d50da1](opentdf@6d50da1)) * **ers:** ldap multi-strategy ers ([opentdf#3117](opentdf#3117)) ([d3aaf1a](opentdf@d3aaf1a)) * **policy:** deprecate ListAttributeValues in favor of existing GetAttribute ([opentdf#3108](opentdf#3108)) ([7e17c2d](opentdf@7e17c2d)) * **policy:** make obligation trigger uniqueness client-aware ([opentdf#3114](opentdf#3114)) ([9265bc3](opentdf@9265bc3)) * **policy:** omit empty attribute values from create responses ([opentdf#3193](opentdf#3193)) ([d298378](opentdf@d298378)) * **policy:** only require namespace on GetAction if no id provided ([opentdf#3144](opentdf#3144)) ([10d0c0f](opentdf@10d0c0f)) * **policy:** Optional namespace on actions protos, NamespacedPolicy feature flag ([opentdf#3155](opentdf#3155)) ([c20f039](opentdf@c20f039)) * **policy:** order List* results by created_at ([opentdf#3088](opentdf#3088)) ([ea90ac2](opentdf@ea90ac2)) * **sdk:** normalize issuer URL before OIDC discovery ([opentdf#3261](opentdf#3261)) ([61f98c9](opentdf@61f98c9)) * **sdk:** reclassify KAS 400 errors — distinguish tamper from misconfiguration ([opentdf#3166](opentdf#3166)) ([f04a385](opentdf@f04a385)) * **sdk:** remove testcontainers from consumer dependency graph ([opentdf#3129](opentdf#3129)) ([f17dcdd](opentdf@f17dcdd)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: opentdf-automation[bot] <149537512+opentdf-automation[bot]@users.noreply.github.com>

elizabethhealy added 2 commits March 12, 2026 13:55

add namespaced actions schema and queries

0c9a92e

remove accidental file commit

3e2c917

github-actions Bot added comp:db DB component comp:policy Policy Configuration ( attributes, subject mappings, resource mappings, kas registry) size/l labels Mar 12, 2026

elizabethhealy changed the title ~~feat(policy)!: namespaced actions db updates~~ feat(policy)!: add namespaced actions schema and namespace-aware action queries Mar 12, 2026

gemini-code-assist Bot reviewed Mar 12, 2026

View reviewed changes

Comment thread service/policy/db/queries/actions.sql

Comment thread service/policy/db/queries/actions.sql

linting

f4442c7

fix tests, take suggestions

01a1db2

gemini-code-assist Bot reviewed Mar 12, 2026

View reviewed changes

Comment thread service/integration/actions_test.go Outdated

Comment thread service/integration/actions_test.go Outdated

take suggestion

ee21d90

gemini-code-assist Bot reviewed Mar 12, 2026

View reviewed changes

Comment thread service/policy/db/actions.go

elizabethhealy changed the title ~~feat(policy)!: add namespaced actions schema and namespace-aware action queries~~ feat(policy): add namespaced actions schema and namespace-aware action queries Mar 12, 2026

elizabethhealy changed the title ~~feat(policy): add namespaced actions schema and namespace-aware action queries~~ feat(policy)!: add namespaced actions schema and namespace-aware action queries Mar 12, 2026

suggestion on error

52700dc

elizabethhealy marked this pull request as ready for review March 12, 2026 19:50

elizabethhealy requested review from a team as code owners March 12, 2026 19:50

alkalescent previously approved these changes Mar 12, 2026

View reviewed changes

resolve RR action names within resource namespace

b8b1264

elizabethhealy dismissed alkalescent’s stale review via b8b1264 March 12, 2026 21:57

elizabethhealy requested a review from alkalescent March 12, 2026 22:07

alkalescent approved these changes Mar 13, 2026

View reviewed changes

elizabethhealy added this pull request to the merge queue Mar 13, 2026

Merged via the queue into main with commit c0443f1 Mar 13, 2026
36 checks passed

elizabethhealy deleted the dspx-2450-namespaced-actions-db-updates branch March 13, 2026 13:49

opentdf-automation Bot mentioned this pull request Mar 12, 2026

chore(main): release service 0.14.0 #3093

Merged

Uh oh!

Conversation

elizabethhealy commented Mar 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Proposed Changes

What changed

Backward compatibility

Checklist

Testing Instructions

Uh oh!

gemini-code-assist Bot commented Mar 12, 2026

Summary of Changes

Highlights

Footnotes

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Uh oh!

Uh oh!

github-actions Bot commented Mar 12, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Mar 12, 2026

X-Test Results

Uh oh!

github-actions Bot commented Mar 12, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Mar 12, 2026

X-Test Results

Uh oh!

github-actions Bot commented Mar 12, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Mar 12, 2026

X-Test Results

Uh oh!

elizabethhealy commented Mar 12, 2026

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Uh oh!

Uh oh!

elizabethhealy commented Mar 12, 2026

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

Uh oh!

github-actions Bot commented Mar 12, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

Bulk Benchmark Results

TDF3 Benchmark Results:

Uh oh!

github-actions Bot commented Mar 12, 2026

X-Test Results

Uh oh!

github-actions Bot commented Mar 12, 2026

Benchmark authorization.GetDecisions Results:

Benchmark authorization.v2.GetMultiResourceDecision Results:

Benchmark Statistics

elizabethhealy commented Mar 12, 2026 •

edited

Loading