fix(objectql): a formula field and a CEL defaultValue answer current_user.can() from the security service (#20082) - #20138

Merged

objectstack-fleet[bot] merged 5 commits into

mainfrom

claude/issue-20082-formula-default-can

Sep 25, 2026

Commits on Sep 25, 2026

fix(objectql): formula fields and CEL defaults answer current_user.can() from the resolved permission map
claude
committed
13701f4
test(objectql): pin current_user.can() in formula fields and CEL defaults across granted, denied, no resolver and a throwing resolver
claude
committed
ca6dea2
chore(changeset): formula fields and CEL defaults answer can() from the security service; pin the validate() rejection
claude
committed
9e622fb
test(objectql): type the engine options in the can() value-site pin rather than erasing them
claude
committed
55ec8fe
test(objectql): the can() value-site pin's driver refuses a WHERE combinator it does not implement
claude
committed
4fcfbed