SqlCheckResponse

SQL access-check result indicating whether the query is allowed and returning the original or policy-rewritten SQL when allowed.

allowedAllowed (boolean)required

Whether the user has read access to the dataset

user_id object

Resolved user ID from the Bearer token

anyOf

• string
• null

string

resource_id object

Primary (FROM-clause) dataset resource ID

anyOf

• string
• null

string

sql object

SQL after applicable row filters and column masks are applied. It equals the original query when no policy changes are needed and is null when allowed is false.

anyOf

• string
• null

string

SqlCheckResponse

{
  "allowed": true,
  "user_id": "string",
  "resource_id": "string",
  "sql": "string"
}