Amin Ghadersohi 6d691b5070 fix(mcp): address remaining code review findings for RBAC tool visibility ...

- app.py: clarify execute_sql requires SQL Lab access (not write access)
  in both the instructions preamble and Permission Awareness section
- auth.py: add log_denial param to check_tool_permission() to suppress
  noisy WARNING logs during tools/list scanning; downgrade "No authenticated
  user found" from ERROR to DEBUG in _setup_user_context
- middleware.py: fail completely closed (return []) on credential failures
  instead of returning tools with no class_permission_name, which could
  include protect=True tools requiring auth; remove _public_tools_only helper
- server.py: catch PermissionError (invalid API key) in addition to
  ValueError in _tool_allowed_for_current_user
- tests: add tests for fail-closed branches (PermissionError, bad ValueError,
  and no-auth-configured ValueError in RBACToolVisibilityMiddleware)

2026-05-15 00:14:15 +00:00

..

common

refactor: Enable G logging rules and comprehensive ruff improvements (#35081)

2025-09-15 12:42:49 -07:00

consts

…

example_data

…

fixtures

…

integration_tests

fix(re-encrypt): handle non-id PKs and make command idempotent (#40079)

2026-05-12 17:59:52 -07:00

unit_tests

fix(mcp): address remaining code review findings for RBAC tool visibility

2026-05-15 00:14:15 +00:00

__init__.py

…

conftest.py

fix: Bump pandas to 2.1.4 for python 3.12 (#34999)

2025-09-19 09:18:00 -07:00