Johannes: elevating every context was a temporary workaround so we didn't have to audit every call and figure out which db calls needed to be admin. I think the admin checking in the db layer has likely outlived its usefulness. It probably should be converted to policy checking or removed completely.
Johannes: elevating every context was a temporary workaround so we didn't have to audit every call and figure out which db calls needed to be admin. I think the admin checking in the db layer has likely outlived its usefulness. It probably should be converted to policy checking or removed completely.