From fb07d552a050b57548817543578605d78ec39452 Mon Sep 17 00:00:00 2001 From: jochen Date: Thu, 8 Oct 2026 21:44:36 +0200 Subject: [PATCH] Name the licences store's sealed tables as they are called, so a statement naming one is refused --- modules/postgres/cmd/postgres-provider/readable.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/postgres/cmd/postgres-provider/readable.go b/modules/postgres/cmd/postgres-provider/readable.go index 787e1687..2f04cd96 100644 --- a/modules/postgres/cmd/postgres-provider/readable.go +++ b/modules/postgres/cmd/postgres-provider/readable.go @@ -122,7 +122,7 @@ func SecretName(name string) bool { return secretName.MatchString(name) } var knownSecretTables = map[string][]string{ "identity": {"signing_key", "authority", "node_key"}, "inventory": {"secret", "module_secret", "operator_key", "bus_membership", "bus_user", "enrolment_token"}, - "licences": {"licence_holder", "licence_manager"}, + "licences": {"licence_holder", "refresh_grant"}, } // statementWord is what the statement guard reads: every word of the statement, literals included, so