database

func (*BloodhoundDB) AppendAuditLog ¶

func (s *BloodhoundDB) AppendAuditLog(ctx context.Context, entry model.AuditEntry) error

func (*BloodhoundDB) AuditableTransaction ¶

func (s *BloodhoundDB) AuditableTransaction(ctx context.Context, auditEntry model.AuditEntry, f func(tx *gorm.DB) error, opts ...*sql.TxOptions) error

func (*BloodhoundDB) CancelAllIngestJobs ¶

func (s *BloodhoundDB) CancelAllIngestJobs(ctx context.Context) error

func (*BloodhoundDB) Close ¶

func (s *BloodhoundDB) Close(ctx context.Context)

func (*BloodhoundDB) CountAllIngestTasks ¶

func (s *BloodhoundDB) CountAllIngestTasks(ctx context.Context) (int64, error)

func (*BloodhoundDB) CreateADDataQualityAggregation ¶

func (s *BloodhoundDB) CreateADDataQualityAggregation(ctx context.Context, aggregation model.ADDataQualityAggregation) (model.ADDataQualityAggregation, error)

func (*BloodhoundDB) CreateADDataQualityStats ¶

func (s *BloodhoundDB) CreateADDataQualityStats(ctx context.Context, stats model.ADDataQualityStats) (model.ADDataQualityStats, error)

func (*BloodhoundDB) CreateAssetGroup ¶

func (s *BloodhoundDB) CreateAssetGroup(ctx context.Context, name, tag string, systemGroup bool) (model.AssetGroup, error)

func (*BloodhoundDB) CreateAssetGroupCollection ¶

func (s *BloodhoundDB) CreateAssetGroupCollection(ctx context.Context, collection model.AssetGroupCollection, entries model.AssetGroupCollectionEntries) error

func (*BloodhoundDB) CreateAssetGroupHistoryRecord ¶

func (s *BloodhoundDB) CreateAssetGroupHistoryRecord(ctx context.Context, actorId, emailAddress string, target string, action model.AssetGroupHistoryAction, assetGroupTagId int, environmentId, note null.String) error

func (*BloodhoundDB) CreateAssetGroupTag ¶

func (s *BloodhoundDB) CreateAssetGroupTag(ctx context.Context, tagType model.AssetGroupTagType, user model.User, name string, description string, position null.Int32, requireCertify null.Bool, glyph null.String) (model.AssetGroupTag, error)

func (*BloodhoundDB) CreateAssetGroupTagSelector ¶

func (s *BloodhoundDB) CreateAssetGroupTagSelector(ctx context.Context, user model.User, selector model.AssetGroupTagSelector) (model.AssetGroupTagSelector, error)

func (*BloodhoundDB) CreateAuditLog ¶

func (s *BloodhoundDB) CreateAuditLog(ctx context.Context, auditLog model.AuditLog) error

func (*BloodhoundDB) CreateAuthSecret ¶

func (s *BloodhoundDB) CreateAuthSecret(ctx context.Context, authSecret model.AuthSecret) (model.AuthSecret, error)

CreateAuthSecret creates a new AuthSecret row INSERT INTO auth_secrets (...) VALUES (....)

func (*BloodhoundDB) CreateAuthToken ¶

func (s *BloodhoundDB) CreateAuthToken(ctx context.Context, authToken model.AuthToken) (model.AuthToken, error)

CreateAuthToken creates a new AuthToken row using the provided struct INSERT INTO auth_tokens (...) VALUES (....)

func (*BloodhoundDB) CreateAzureDataQualityAggregation ¶

func (s *BloodhoundDB) CreateAzureDataQualityAggregation(ctx context.Context, aggregation model.AzureDataQualityAggregation) (model.AzureDataQualityAggregation, error)

func (*BloodhoundDB) CreateAzureDataQualityStats ¶

func (s *BloodhoundDB) CreateAzureDataQualityStats(ctx context.Context, stats model.AzureDataQualityStats) (model.AzureDataQualityStats, error)

func (*BloodhoundDB) CreateCompletedTask ¶

func (s *BloodhoundDB) CreateCompletedTask(ctx context.Context, task model.CompletedTask) (model.CompletedTask, error)

func (*BloodhoundDB) CreateCompositionInfo ¶

func (s *BloodhoundDB) CreateCompositionInfo(ctx context.Context, nodes model.EdgeCompositionNodes, edges model.EdgeCompositionEdges) (model.EdgeCompositionNodes, model.EdgeCompositionEdges, error)

func (*BloodhoundDB) CreateCustomNodeKinds ¶

func (s *BloodhoundDB) CreateCustomNodeKinds(ctx context.Context, customNodeKinds model.CustomNodeKinds) (model.CustomNodeKinds, error)

func (*BloodhoundDB) CreateDataQualityAggregations ¶

func (s *BloodhoundDB) CreateDataQualityAggregations(ctx context.Context, aggregations model.DataQualityAggregations) (model.DataQualityAggregations, error)

CreateDataQualityAggregations batch-inserts the given slice of model.DataQualityAggregation.

func (*BloodhoundDB) CreateDataQualityStats ¶

func (s *BloodhoundDB) CreateDataQualityStats(ctx context.Context, stats model.DataQualityStats) (model.DataQualityStats, error)

func (*BloodhoundDB) CreateEnvironment ¶

func (s *BloodhoundDB) CreateEnvironment(ctx context.Context, extensionId int32, environmentKindId int32, sourceKindId int32) (model.SchemaEnvironment, error)

CreateEnvironment - creates a new schema_environment. Uses a CTE to JOIN the kinds table against the RETURNING clause so that EnvironmentKindName is populated in the returned struct without a separate re-fetch.

func (*BloodhoundDB) CreateEnvironmentWithPrincipalKinds ¶

func (s *BloodhoundDB) CreateEnvironmentWithPrincipalKinds(ctx context.Context, extensionId int32, input model.EnvironmentInput) (model.SchemaEnvironment, error)

CreateEnvironmentWithPrincipalKinds translates FK names, creates the environment row, and reconciles its principal kinds.

func (*BloodhoundDB) CreateFindingWithRemediation ¶

func (s *BloodhoundDB) CreateFindingWithRemediation(ctx context.Context, extensionId int32, input model.RelationshipFindingInput) (model.SchemaFinding, error)

CreateFindingWithRemediation translates FK names, creates the finding, and creates its 1:1 remediation.

func (*BloodhoundDB) CreateGraphSchemaExtension ¶

func (s *BloodhoundDB) CreateGraphSchemaExtension(ctx context.Context, name string, displayName string, version string, namespace string) (model.GraphSchemaExtension, error)

CreateGraphSchemaExtension creates a new row in the extensions table. A GraphSchemaExtension struct is returned, populated with the value as it stands in the database.

func (*BloodhoundDB) CreateGraphSchemaNodeKind ¶

func (s *BloodhoundDB) CreateGraphSchemaNodeKind(ctx context.Context, name string, extensionId int32, displayName string, description string, isDisplayKind bool, icon, iconColor string) (model.GraphSchemaNodeKind, error)

CreateGraphSchemaNodeKind - creates a new row in the schema_node_kinds table. A model.GraphSchemaNodeKind struct is returned, populated with the value as it stands in the database. This will also create a kind in the DAWGS kind table if the kind does not already exist.

Since this inserts directly into the kinds table, the business logic calling this func must also call the DAWGS RefreshKinds function to ensure the kinds are reloaded into the in memory kind map.

func (*BloodhoundDB) CreateGraphSchemaProperty ¶

func (s *BloodhoundDB) CreateGraphSchemaProperty(ctx context.Context, extensionId int32, name string, displayName string, dataType string, description string) (model.GraphSchemaProperty, error)

CreateGraphSchemaProperty creates a new row in the schema_properties table. A GraphSchemaProperty struct is returned, populated with the value as it stands in the database.

func (*BloodhoundDB) CreateGraphSchemaRelationshipKind ¶

func (s *BloodhoundDB) CreateGraphSchemaRelationshipKind(ctx context.Context, name string, schemaExtensionId int32, description string, isTraversable bool) (model.GraphSchemaRelationshipKind, error)

CreateGraphSchemaRelationshipKind - creates a new row in the schema_relationship_kinds table. A model.GraphSchemaRelationshipKind struct is returned, populated with the value as it stands in the database. This will also create a kind in the DAWGS kind table if the kind does not already exist.

Since this inserts directly into the kinds table, the business logic calling this func must also call the DAWGS RefreshKinds function to ensure the kinds are reloaded into the in memory kind map.

func (*BloodhoundDB) CreateIngestJob ¶

func (s *BloodhoundDB) CreateIngestJob(ctx context.Context, job model.IngestJob) (model.IngestJob, error)

func (*BloodhoundDB) CreateIngestTask ¶

func (s *BloodhoundDB) CreateIngestTask(ctx context.Context, ingestTask model.IngestTask) (model.IngestTask, error)

func (*BloodhoundDB) CreateInstallation ¶

func (s *BloodhoundDB) CreateInstallation(ctx context.Context) (model.Installation, error)

CreateInstallation creates a new Installation row INSERT INTO installations(....) VALUES (...)

func (*BloodhoundDB) CreateKindInfo ¶

func (s *BloodhoundDB) CreateKindInfo(ctx context.Context, kindID int32, nodeKindID, relationshipKindID *int32, kindInfo model.KindInfoInput) (model.GraphSchemaKindInfo, error)

func (*BloodhoundDB) CreateOIDCProvider ¶

func (s *BloodhoundDB) CreateOIDCProvider(ctx context.Context, name, issuer, clientID string, config model.SSOProviderConfig) (model.OIDCProvider, error)

CreateOIDCProvider creates a new entry for an OIDC provider as well as the associated SSO provider

func (*BloodhoundDB) CreatePrincipalKind ¶

func (s *BloodhoundDB) CreatePrincipalKind(ctx context.Context, environmentId int32, principalKind int32) (model.SchemaEnvironmentPrincipalKind, error)

func (*BloodhoundDB) CreateRemediation ¶

func (s *BloodhoundDB) CreateRemediation(ctx context.Context, findingId int32, shortDescription string, longDescription string, shortRemediation string, longRemediation string) (model.Remediation, error)

func (*BloodhoundDB) CreateSAMLConsumedIdentifiers ¶

func (s *BloodhoundDB) CreateSAMLConsumedIdentifiers(ctx context.Context, ssoProviderID int32, idpIssuer, responseID, assertionID string,
	expiresAt time.Time) error

CreateSAMLConsumedIdentifiers inserts the SAMLResponse and assertion from a single SAML login so they cannot be replayed. Both identifiers are inserted together or not at all. If either identifier has already been consumed, it returns ErrSAMLIdentifierAlreadyConsumed and no records are written.

func (*BloodhoundDB) CreateSAMLIdentityProvider ¶

func (s *BloodhoundDB) CreateSAMLIdentityProvider(ctx context.Context, samlProvider model.SAMLProvider, config model.SSOProviderConfig) (model.SAMLProvider, error)

CreateSAMLIdentityProvider creates a new saml_providers row using the data in the input struct This also creates the corresponding sso_provider entry INSERT INTO saml_identity_providers (...) VALUES (...)

func (*BloodhoundDB) CreateSSOProvider ¶

func (s *BloodhoundDB) CreateSSOProvider(ctx context.Context, name string, authProvider model.SessionAuthProvider, config model.SSOProviderConfig) (model.SSOProvider, error)

CreateSSOProvider creates an entry in the sso_providers table A slug will be created for the SSO Provider using the name argument as a base. The name will be lower cased and all spaces are replaced with `-`

func (*BloodhoundDB) CreateSavedQueries ¶

func (s *BloodhoundDB) CreateSavedQueries(ctx context.Context, savedQueries model.SavedQueries) error

CreateSavedQueries - inserts saved queries records in batches

func (*BloodhoundDB) CreateSavedQuery ¶

func (s *BloodhoundDB) CreateSavedQuery(ctx context.Context, userID uuid.UUID, name string, query string, description string, schemaExtensionID *int32, queryKey *string, category string) (model.SavedQuery, error)

func (*BloodhoundDB) CreateSavedQueryPermissionToPublic ¶

func (s *BloodhoundDB) CreateSavedQueryPermissionToPublic(ctx context.Context, queryID int64) (model.SavedQueriesPermissions, error)

CreateSavedQueryPermissionToPublic creates a new entry to the SavedQueriesPermissions table granting public read permissions to all users

func (*BloodhoundDB) CreateSavedQueryPermissionsToUsers ¶

func (s *BloodhoundDB) CreateSavedQueryPermissionsToUsers(ctx context.Context, queryID int64, userIDs ...uuid.UUID) ([]model.SavedQueriesPermissions, error)

CreateSavedQueryPermissionsToUsers - attempts to save the given saved query permissions in batches of 100 in a transaction. This will remove previously shared with users and replace it with the incoming user ids.

func (*BloodhoundDB) CreateSchemaFinding ¶

func (s *BloodhoundDB) CreateSchemaFinding(ctx context.Context, findingType model.SchemaFindingType, extensionId int32, kindId int32, environmentId int32, name string, displayName string, pzDisplayName string) (model.SchemaFinding, error)

CreateSchemaFinding - creates a new schema finding.

func (*BloodhoundDB) CreateSchemaFindingSubtype ¶

func (s *BloodhoundDB) CreateSchemaFindingSubtype(ctx context.Context, findingId int32, subtype string) error

func (*BloodhoundDB) CreateUser ¶

func (s *BloodhoundDB) CreateUser(ctx context.Context, user model.User) (model.User, error)

CreateUser creates a new user INSERT INTO users (...) VALUES (...)

func (*BloodhoundDB) CreateUserSession ¶

func (s *BloodhoundDB) CreateUserSession(ctx context.Context, userSession model.UserSession) (model.UserSession, error)

CreateUserSession creates a new UserSession row INSERT INTO user_sessions (...) VALUES (..)

func (*BloodhoundDB) DeleteAllAuthTokens ¶

func (s *BloodhoundDB) DeleteAllAuthTokens(ctx context.Context) error

DeleteAllAuthTokens deletes all tokens at startup if the APITokens parameter is disabled (enabled=false). An audit log is created for this action.

func (*BloodhoundDB) DeleteAllDataQuality ¶

func (s *BloodhoundDB) DeleteAllDataQuality(ctx context.Context) error

func (*BloodhoundDB) DeleteAllIngestJobs ¶

func (s *BloodhoundDB) DeleteAllIngestJobs(ctx context.Context) error

func (*BloodhoundDB) DeleteAllIngestTasks ¶

func (s *BloodhoundDB) DeleteAllIngestTasks(ctx context.Context) error

func (*BloodhoundDB) DeleteAnalysisRequest ¶

func (s *BloodhoundDB) DeleteAnalysisRequest(ctx context.Context) error

func (*BloodhoundDB) DeleteAssetGroup ¶

func (s *BloodhoundDB) DeleteAssetGroup(ctx context.Context, assetGroup model.AssetGroup) error

func (*BloodhoundDB) DeleteAssetGroupHistoryRecordsByCreatedDate ¶

func (s *BloodhoundDB) DeleteAssetGroupHistoryRecordsByCreatedDate(ctx context.Context, createdAt time.Time) (int64, error)

func (*BloodhoundDB) DeleteAssetGroupSelector ¶

func (s *BloodhoundDB) DeleteAssetGroupSelector(ctx context.Context, selector model.AssetGroupSelector) error

func (*BloodhoundDB) DeleteAssetGroupSelectorsForAssetGroups ¶

func (s *BloodhoundDB) DeleteAssetGroupSelectorsForAssetGroups(ctx context.Context, assetGroupIds []int) error

func (*BloodhoundDB) DeleteAssetGroupTag ¶

func (s *BloodhoundDB) DeleteAssetGroupTag(ctx context.Context, user model.User, assetGroupTag model.AssetGroupTag) error

func (*BloodhoundDB) DeleteAssetGroupTagSelector ¶

func (s *BloodhoundDB) DeleteAssetGroupTagSelector(ctx context.Context, user model.User, selector model.AssetGroupTagSelector) error

func (*BloodhoundDB) DeleteAuthSecret ¶

func (s *BloodhoundDB) DeleteAuthSecret(ctx context.Context, authSecret model.AuthSecret) error

DeleteAuthSecret deletes the auth secret row corresponding to the struct specified DELETE FROM auth_secrets WHERE user_id = ...

func (*BloodhoundDB) DeleteAuthToken ¶

func (s *BloodhoundDB) DeleteAuthToken(ctx context.Context, authToken model.AuthToken) error

DeleteAuthToken deletes the provided AuthToken row DELETE FROM auth_tokens WHERE id = ...

func (*BloodhoundDB) DeleteCustomNodeKind ¶

func (s *BloodhoundDB) DeleteCustomNodeKind(ctx context.Context, kindName string) error

func (*BloodhoundDB) DeleteEnvironment ¶

func (s *BloodhoundDB) DeleteEnvironment(ctx context.Context, environmentId int32) error

DeleteEnvironment - deletes a schema environment by id.

func (*BloodhoundDB) DeleteEnvironmentTargetedAccessControlForUser ¶

func (s *BloodhoundDB) DeleteEnvironmentTargetedAccessControlForUser(ctx context.Context, user model.User) error

DeleteEnvironmentTargetedAccessControlForUser will remove all rows associated with a user in the environment_targeted_access_control table

func (*BloodhoundDB) DeleteExpiredAuthTokens ¶

func (s *BloodhoundDB) DeleteExpiredAuthTokens(ctx context.Context) error

func (*BloodhoundDB) DeleteGraphSchemaExtension ¶

func (s *BloodhoundDB) DeleteGraphSchemaExtension(ctx context.Context, extensionId int32) error

DeleteGraphSchemaExtension deletes an existing Graph Schema Extension based on the extension ID. It returns an error if the extension does not exist. Built-In Extensions will return an error if there is an attempt to delete it.

func (*BloodhoundDB) DeleteGraphSchemaNodeKind ¶

func (s *BloodhoundDB) DeleteGraphSchemaNodeKind(ctx context.Context, schemaNodeKindId int32) error

DeleteGraphSchemaNodeKind - deletes a schema_node_kinds row based on the provided id. Will return an error if that id does not exist.

func (*BloodhoundDB) DeleteGraphSchemaProperty ¶

func (s *BloodhoundDB) DeleteGraphSchemaProperty(ctx context.Context, propertyID int32) error

DeleteGraphSchemaProperty - deletes a schema_properties row based on the provided id. It will return an error if that id does not exist.

func (*BloodhoundDB) DeleteGraphSchemaRelationshipKind ¶

func (s *BloodhoundDB) DeleteGraphSchemaRelationshipKind(ctx context.Context, schemaRelationshipKindId int32) error

DeleteGraphSchemaRelationshipKind - deletes a schema_relationship_kind row based on the provided id. It will return an error if that id does not exist.

func (*BloodhoundDB) DeleteIngestTask ¶

func (s *BloodhoundDB) DeleteIngestTask(ctx context.Context, ingestTask model.IngestTask) error

func (*BloodhoundDB) DeleteKindInfo ¶

func (s *BloodhoundDB) DeleteKindInfo(ctx context.Context, kindInfoID int32) error

func (*BloodhoundDB) DeletePrincipalKind ¶

func (s *BloodhoundDB) DeletePrincipalKind(ctx context.Context, environmentId int32, principalKind int32) error

func (*BloodhoundDB) DeleteRemediation ¶

func (s *BloodhoundDB) DeleteRemediation(ctx context.Context, findingId int32) error

func (*BloodhoundDB) DeleteSSOProvider ¶

func (s *BloodhoundDB) DeleteSSOProvider(ctx context.Context, id int) error

DeleteSSOProvider deletes a sso_provider entry with a matching id

func (*BloodhoundDB) DeleteSavedQuery ¶

func (s *BloodhoundDB) DeleteSavedQuery(ctx context.Context, savedQueryID int64) error

func (*BloodhoundDB) DeleteSavedQueryPermissionsForUsers ¶

func (s *BloodhoundDB) DeleteSavedQueryPermissionsForUsers(ctx context.Context, queryID int64, userIDs ...uuid.UUID) error

DeleteSavedQueryPermissionsForUsers batch deletes permissions associated with a query id and a list of users If no user ids are supplied, all records for query id are deleted

func (*BloodhoundDB) DeleteSchemaFinding ¶

func (s *BloodhoundDB) DeleteSchemaFinding(ctx context.Context, findingId int32) error

DeleteSchemaFinding - deletes a schema finding by id.

func (*BloodhoundDB) DeleteSelectorNodes ¶

func (s *BloodhoundDB) DeleteSelectorNodes(ctx context.Context, nodes []model.AssetGroupSelectorNode) error

func (*BloodhoundDB) DeleteSelectorNodesBySelectorIds ¶

func (s *BloodhoundDB) DeleteSelectorNodesBySelectorIds(ctx context.Context, selectorIds ...int) error

func (*BloodhoundDB) DeleteSourceKindsByName ¶

func (s *BloodhoundDB) DeleteSourceKindsByName(ctx context.Context, names ...string) error

func (*BloodhoundDB) DeleteUser ¶

func (s *BloodhoundDB) DeleteUser(ctx context.Context, user model.User) error

DeleteUser removes all roles for a given user, thereby revoking all permissions UPDATE users SET roles = nil WHERE user_id = ....

func (*BloodhoundDB) EndUserSession ¶

func (s *BloodhoundDB) EndUserSession(ctx context.Context, userSession model.UserSession)

EndUserSession terminates the provided session UPDATE user_sessions SET expires_at = <now> WHERE user_id = ...

func (*BloodhoundDB) EnsureStubbedCustomNodeKindForIngest ¶

func (s *BloodhoundDB) EnsureStubbedCustomNodeKindForIngest(ctx context.Context, name string) error

func (*BloodhoundDB) GetADDataQualityAggregations ¶

func (s *BloodhoundDB) GetADDataQualityAggregations(ctx context.Context, start time.Time, end time.Time, order string, limit int, skip int) (model.ADDataQualityAggregations, int, error)

func (*BloodhoundDB) GetADDataQualityStats ¶

func (s *BloodhoundDB) GetADDataQualityStats(ctx context.Context, domainSid string, start time.Time, end time.Time, order string, limit int, skip int) (model.ADDataQualityStats, int, error)

func (*BloodhoundDB) GetAggregateADDataQualityStats ¶

func (s *BloodhoundDB) GetAggregateADDataQualityStats(ctx context.Context, domainSIDs []string, start time.Time, end time.Time) (model.ADDataQualityStats, error)

GetAggregateADDataQualityStats will aggregate AD Quality stats by summing the maximum asset counts per environment per day. Due to session and group completeness being percentages, it will return the single maximum value of all environments per day.

func (*BloodhoundDB) GetAggregatedSelectorNodesCertification ¶

func (s *BloodhoundDB) GetAggregatedSelectorNodesCertification(ctx context.Context, sqlFilter model.SQLFilter, skip, limit int) ([]model.AssetGroupSelectorNodeExpanded, int, error)

func (*BloodhoundDB) GetAllAssetGroups ¶

func (s *BloodhoundDB) GetAllAssetGroups(ctx context.Context, order string, filter model.SQLFilter) (model.AssetGroups, error)

func (*BloodhoundDB) GetAllAuthTokens ¶

func (s *BloodhoundDB) GetAllAuthTokens(ctx context.Context, order string, filter model.SQLFilter) (model.AuthTokens, error)

func (*BloodhoundDB) GetAllConfigurationParameters ¶

func (s *BloodhoundDB) GetAllConfigurationParameters(ctx context.Context) (appcfg.Parameters, error)

func (*BloodhoundDB) GetAllFlags ¶

func (s *BloodhoundDB) GetAllFlags(ctx context.Context) ([]appcfg.FeatureFlag, error)

func (*BloodhoundDB) GetAllIngestJobs ¶

func (s *BloodhoundDB) GetAllIngestJobs(ctx context.Context, skip int, limit int, order string, filter model.SQLFilter) ([]model.IngestJob, int, error)

func (*BloodhoundDB) GetAllIngestTasks ¶

func (s *BloodhoundDB) GetAllIngestTasks(ctx context.Context) (model.IngestTasks, error)

func (*BloodhoundDB) GetAllRoles ¶

func (s *BloodhoundDB) GetAllRoles(ctx context.Context, order string, filter model.SQLFilter) (model.Roles, error)

GetAllRoles retrieves all available roles in the db SELECT * FROM roles

func (*BloodhoundDB) GetAllSAMLProviders ¶

func (s *BloodhoundDB) GetAllSAMLProviders(ctx context.Context) (model.SAMLProviders, error)

GetAllSAMLProviders returns all SAML providers SELECT * FROM saml_providers

func (*BloodhoundDB) GetAllSSOProviders ¶

func (s *BloodhoundDB) GetAllSSOProviders(ctx context.Context, order string, sqlFilter model.SQLFilter) ([]model.SSOProvider, error)

func (*BloodhoundDB) GetAllSavedQueriesByUser ¶

func (s *BloodhoundDB) GetAllSavedQueriesByUser(ctx context.Context, userID uuid.UUID) (model.SavedQueries, error)

GetAllSavedQueriesByUser - Returns queries that are public, owned by, or shared to the user.

func (*BloodhoundDB) GetAllUsers ¶

func (s *BloodhoundDB) GetAllUsers(ctx context.Context, order string, filter model.SQLFilter) (model.Users, error)

func (*BloodhoundDB) GetAnalysisRequest ¶

func (s *BloodhoundDB) GetAnalysisRequest(ctx context.Context) (model.AnalysisRequest, error)

func (*BloodhoundDB) GetAssetGroup ¶

func (s *BloodhoundDB) GetAssetGroup(ctx context.Context, id int32) (model.AssetGroup, error)

func (*BloodhoundDB) GetAssetGroupCollections ¶

func (s *BloodhoundDB) GetAssetGroupCollections(ctx context.Context, assetGroupID int32, order string, filter model.SQLFilter) (model.AssetGroupCollections, error)

func (*BloodhoundDB) GetAssetGroupHistoryRecords ¶

func (s *BloodhoundDB) GetAssetGroupHistoryRecords(ctx context.Context, sqlFilter model.SQLFilter, sortItems model.Sort, skip, limit int) ([]model.AssetGroupHistory, int, error)

func (*BloodhoundDB) GetAssetGroupSelector ¶

func (s *BloodhoundDB) GetAssetGroupSelector(ctx context.Context, id int32) (model.AssetGroupSelector, error)

func (*BloodhoundDB) GetAssetGroupSelectorNodeExpandedOrderedByIdAndPosition ¶

func (s *BloodhoundDB) GetAssetGroupSelectorNodeExpandedOrderedByIdAndPosition(ctx context.Context, nodeIds ...int) ([]model.AssetGroupSelectorNodeExpanded, error)

func (*BloodhoundDB) GetAssetGroupTag ¶

func (s *BloodhoundDB) GetAssetGroupTag(ctx context.Context, assetGroupTagId int) (model.AssetGroupTag, error)

func (*BloodhoundDB) GetAssetGroupTagForSelection ¶

func (s *BloodhoundDB) GetAssetGroupTagForSelection(ctx context.Context) ([]model.AssetGroupTag, error)

func (*BloodhoundDB) GetAssetGroupTagSelectorBySelectorId ¶

func (s *BloodhoundDB) GetAssetGroupTagSelectorBySelectorId(ctx context.Context, assetGroupTagSelectorId int) (model.AssetGroupTagSelector, error)

func (*BloodhoundDB) GetAssetGroupTagSelectorCounts ¶

func (s *BloodhoundDB) GetAssetGroupTagSelectorCounts(ctx context.Context, tagIds []int) (model.AssetGroupTagCountsMap, error)

func (*BloodhoundDB) GetAssetGroupTagSelectors ¶

func (s *BloodhoundDB) GetAssetGroupTagSelectors(ctx context.Context, sqlFilter model.SQLFilter, limit int) (model.AssetGroupTagSelectors, error)

func (*BloodhoundDB) GetAssetGroupTagSelectorsByExtensionId ¶

func (s *BloodhoundDB) GetAssetGroupTagSelectorsByExtensionId(ctx context.Context, extensionId int32) (model.AssetGroupTagSelectors, error)

func (*BloodhoundDB) GetAssetGroupTagSelectorsByTagId ¶

func (s *BloodhoundDB) GetAssetGroupTagSelectorsByTagId(ctx context.Context, assetGroupTagId int) (model.AssetGroupTagSelectors, int, error)

func (*BloodhoundDB) GetAssetGroupTagSelectorsByTagIdFilteredAndPaginated ¶

func (s *BloodhoundDB) GetAssetGroupTagSelectorsByTagIdFilteredAndPaginated(ctx context.Context, assetGroupTagId int, selectorSqlFilter, selectorSeedSqlFilter model.SQLFilter, sort model.Sort, skip, limit int) (model.AssetGroupTagSelectors, int, error)

func (*BloodhoundDB) GetAssetGroupTags ¶

func (s *BloodhoundDB) GetAssetGroupTags(ctx context.Context, sqlFilter model.SQLFilter) (model.AssetGroupTags, error)

func (*BloodhoundDB) GetAuthSecret ¶

func (s *BloodhoundDB) GetAuthSecret(ctx context.Context, id int32) (model.AuthSecret, error)

GetAuthSecret retrieves the AuthSecret row associated with the provided ID SELECT * FROM auth_secrets WHERE id = ....

func (*BloodhoundDB) GetAuthToken ¶

func (s *BloodhoundDB) GetAuthToken(ctx context.Context, id uuid.UUID) (model.AuthToken, error)

GetAuthToken retrieves the AuthToken row associated with the provided ID SELECT * FROM auth_tokens WHERE id = ....

func (*BloodhoundDB) GetAzureDataQualityAggregations ¶

func (s *BloodhoundDB) GetAzureDataQualityAggregations(ctx context.Context, start time.Time, end time.Time, order string, limit int, skip int) (model.AzureDataQualityAggregations, int, error)

func (*BloodhoundDB) GetAzureDataQualityStats ¶

func (s *BloodhoundDB) GetAzureDataQualityStats(ctx context.Context, tenantId string, start time.Time, end time.Time, order string, limit int, skip int) (model.AzureDataQualityStats, int, error)

func (*BloodhoundDB) GetCompletedTasks ¶

func (s *BloodhoundDB) GetCompletedTasks(ctx context.Context, ingestJobId int64) ([]model.CompletedTask, error)

func (*BloodhoundDB) GetConfigurationParameter ¶

func (s *BloodhoundDB) GetConfigurationParameter(ctx context.Context, parameterKey appcfg.ParameterKey) (appcfg.Parameter, error)

func (*BloodhoundDB) GetCustomAssetGroupTagSelectorsToMigrate ¶

func (s *BloodhoundDB) GetCustomAssetGroupTagSelectorsToMigrate(ctx context.Context) (model.AssetGroupTagSelectors, error)

func (*BloodhoundDB) GetCustomNodeKind ¶

func (s *BloodhoundDB) GetCustomNodeKind(ctx context.Context, kindName string) (model.CustomNodeKind, error)

func (*BloodhoundDB) GetCustomNodeKinds ¶

func (s *BloodhoundDB) GetCustomNodeKinds(ctx context.Context) ([]model.CustomNodeKind, error)

func (*BloodhoundDB) GetDataQualityAggregations ¶

func (s *BloodhoundDB) GetDataQualityAggregations(ctx context.Context, filters model.Filters, sort model.Sort, skip, limit int) (model.DataQualityAggregations, int, error)

GetDataQualityAggregations returns filtered, paginated model.DataQualityAggregations and the total count of matching rows, excluding soft-deleted rows. When no sort is provided, results default to created_at descending with id ascending as a tiebreaker.

func (*BloodhoundDB) GetDataQualityStats ¶

func (s *BloodhoundDB) GetDataQualityStats(ctx context.Context, filters model.Filters, sort model.Sort, skip, limit int) (model.DataQualityStats, int, error)

GetDataQualityStats gets all rows from the Data Quality Stats table that match the given SQL Filter. If no sorting is provided, it will sort rows by the CreatedAt date in descending order with id ascending as a tiebreaker.

func (*BloodhoundDB) GetDatapipeStatus ¶

func (s *BloodhoundDB) GetDatapipeStatus(ctx context.Context) (model.DatapipeStatusWrapper, error)

func (*BloodhoundDB) GetEnvironmentByEnvironmentKindId ¶

func (s *BloodhoundDB) GetEnvironmentByEnvironmentKindId(ctx context.Context, environmentKindId int32) (model.SchemaEnvironment, error)

GetEnvironmentByEnvironmentKindId - retrieves a schema environment by environment_kind_id.

func (*BloodhoundDB) GetEnvironmentById ¶

func (s *BloodhoundDB) GetEnvironmentById(ctx context.Context, environmentId int32) (model.SchemaEnvironment, error)

GetEnvironmentById - retrieves a schema environment by id.

func (*BloodhoundDB) GetEnvironmentKindName ¶

func (s *BloodhoundDB) GetEnvironmentKindName(ctx context.Context, kindName string) (model.SchemaEnvironment, error)

GetEnvironmentKindName - retrieves the schema environment whose environment kind has the given name.

func (*BloodhoundDB) GetEnvironmentTargetedAccessControlForUser ¶

func (s *BloodhoundDB) GetEnvironmentTargetedAccessControlForUser(ctx context.Context, user model.User) ([]model.EnvironmentTargetedAccessControl, error)

GetEnvironmentTargetedAccessControlForUser given a user's id, this will return all access control list rows for the user

func (*BloodhoundDB) GetEnvironments ¶

func (s *BloodhoundDB) GetEnvironments(ctx context.Context) ([]model.SchemaEnvironment, error)

GetEnvironments - retrieves list of schema environments.

func (*BloodhoundDB) GetEnvironmentsByExtensionId ¶

func (s *BloodhoundDB) GetEnvironmentsByExtensionId(ctx context.Context, extensionId int32) ([]model.SchemaEnvironment, error)

GetEnvironmentsByExtensionId - retrieves a slice of model.SchemaEnvironment by extension id.

func (*BloodhoundDB) GetEnvironmentsFiltered ¶

func (s *BloodhoundDB) GetEnvironmentsFiltered(ctx context.Context, filters model.Filters) ([]model.SchemaEnvironment, error)

GetEnvironmentsFiltered - retrieves schema environments filtered by the given criteria. This is the core implementation that all other GetEnvironment* methods delegate to. Common use case: filter by schema_extension_id to get all environments for a specific extension. Example: filters := model.Filters{"se.schema_extension_id": []model.Filter{{Operator: model.Equals, Value: "1"}}}

func (*BloodhoundDB) GetFlag ¶

func (s *BloodhoundDB) GetFlag(ctx context.Context, id int32) (appcfg.FeatureFlag, error)

func (*BloodhoundDB) GetFlagByKey ¶

func (s *BloodhoundDB) GetFlagByKey(ctx context.Context, key string) (appcfg.FeatureFlag, error)

func (*BloodhoundDB) GetGraphSchemaExtensionById ¶

func (s *BloodhoundDB) GetGraphSchemaExtensionById(ctx context.Context, extensionId int32) (model.GraphSchemaExtension, error)

GetGraphSchemaExtensionById gets a row from the extensions table by id. It returns a GraphSchemaExtension struct populated with the data, or an error if that id does not exist.

func (*BloodhoundDB) GetGraphSchemaExtensions ¶

func (s *BloodhoundDB) GetGraphSchemaExtensions(ctx context.Context, extensionFilters model.Filters, sort model.Sort, skip, limit int) (model.GraphSchemaExtensions, int, error)

GetGraphSchemaExtensions gets all the rows from the extensions table that match the given SQLFilter. It returns a slice of GraphSchemaExtension structs populated with the data, as well as an integer giving the total number of rows returned by the query (excluding any given pagination)

func (*BloodhoundDB) GetGraphSchemaNodeKindById ¶

func (s *BloodhoundDB) GetGraphSchemaNodeKindById(ctx context.Context, schemaNodeKindId int32) (model.GraphSchemaNodeKind, error)

GetGraphSchemaNodeKindById - gets a row from the schema_node_kinds table by id. It returns a model.GraphSchemaNodeKind struct populated with the data, or an error if that id does not exist.

func (*BloodhoundDB) GetGraphSchemaNodeKinds ¶

func (s *BloodhoundDB) GetGraphSchemaNodeKinds(ctx context.Context, filters model.Filters, sort model.Sort, skip, limit int) (model.GraphSchemaNodeKinds, int, error)

GetGraphSchemaNodeKinds - returns all rows from the schema_node_kinds table that matches the given model.Filters. It returns a slice of model.GraphSchemaNodeKinds structs populated with data, as well as an integer indicating the total number of rows returned by the query (excluding any given pagination).

func (*BloodhoundDB) GetGraphSchemaNodeKindsByExtensionId ¶

func (s *BloodhoundDB) GetGraphSchemaNodeKindsByExtensionId(ctx context.Context, extensionId int32) (model.GraphSchemaNodeKinds, error)

GetGraphSchemaNodeKindsByExtensionId - retrieves all node kinds belonging to the given extension.

func (*BloodhoundDB) GetGraphSchemaProperties ¶

func (s *BloodhoundDB) GetGraphSchemaProperties(ctx context.Context, filters model.Filters, sort model.Sort, skip, limit int) (model.GraphSchemaProperties, int, error)

GetGraphSchemaProperties - returns all rows from the schema_properties table that matches the given model.Filters. It returns a slice of model.GraphSchemaProperties structs populated with data, as well as an integer indicating the total number of rows returned by the query (excluding any given pagination).

func (*BloodhoundDB) GetGraphSchemaPropertyById ¶

func (s *BloodhoundDB) GetGraphSchemaPropertyById(ctx context.Context, extensionPropertyId int32) (model.GraphSchemaProperty, error)

GetGraphSchemaPropertyById gets a row from the schema_properties table by id. It returns a GraphSchemaProperty struct populated with the data, or an error if that id does not exist.

func (*BloodhoundDB) GetGraphSchemaRelationshipKindById ¶

func (s *BloodhoundDB) GetGraphSchemaRelationshipKindById(ctx context.Context, schemaRelationshipKindId int32) (model.GraphSchemaRelationshipKind, error)

GetGraphSchemaRelationshipKindById - retrieves a row from the schema_relationship_kinds table

func (*BloodhoundDB) GetGraphSchemaRelationshipKinds ¶

func (s *BloodhoundDB) GetGraphSchemaRelationshipKinds(ctx context.Context, relationshipKindFilters model.Filters, sort model.Sort, skip, limit int) (model.GraphSchemaRelationshipKinds, int, error)

GetGraphSchemaRelationshipKinds - returns all rows from the schema_relationship_kinds table that matches the given model.Filters. It returns a slice of model.GraphSchemaRelationshipKinds populated with data, as well as an integer indicating the total number of rows returned by the query (excluding any given pagination).

func (*BloodhoundDB) GetGraphSchemaRelationshipKindsByExtensionId ¶

func (s *BloodhoundDB) GetGraphSchemaRelationshipKindsByExtensionId(ctx context.Context, extensionId int32) (model.GraphSchemaRelationshipKinds, error)

GetGraphSchemaRelationshipKindsByExtensionId - retrieves all relationship kinds belonging to the given extension.

func (*BloodhoundDB) GetGraphSchemaRelationshipKindsWithSchemaName ¶

func (s *BloodhoundDB) GetGraphSchemaRelationshipKindsWithSchemaName(ctx context.Context, relationshipKindFilters model.Filters, sort model.Sort, skip, limit int) (model.GraphSchemaRelationshipKindsWithNamedSchema, int, error)

func (*BloodhoundDB) GetIngestJob ¶

func (s *BloodhoundDB) GetIngestJob(ctx context.Context, id int64) (model.IngestJob, error)

func (*BloodhoundDB) GetIngestJobsWithStatus ¶

func (s *BloodhoundDB) GetIngestJobsWithStatus(ctx context.Context, status model.JobStatus) ([]model.IngestJob, error)

func (*BloodhoundDB) GetIngestTasksForJob ¶

func (s *BloodhoundDB) GetIngestTasksForJob(ctx context.Context, jobID int64) (model.IngestTasks, error)

func (*BloodhoundDB) GetInstallation ¶

func (s *BloodhoundDB) GetInstallation(ctx context.Context) (model.Installation, error)

GetInstallation retrieves the first row from installations SELECT TOP 1 * FROM installations

func (*BloodhoundDB) GetKindInfos ¶

func (s *BloodhoundDB) GetKindInfos(ctx context.Context, kindID int32) ([]model.GraphSchemaKindInfo, error)

func (*BloodhoundDB) GetKindsByIDs ¶

func (s *BloodhoundDB) GetKindsByIDs(ctx context.Context, ids ...int32) ([]model.Kind, error)

func (*BloodhoundDB) GetKindsByNames ¶

func (s *BloodhoundDB) GetKindsByNames(ctx context.Context, names ...string) ([]model.Kind, error)

func (*BloodhoundDB) GetLatestAssetGroupCollection ¶

func (s *BloodhoundDB) GetLatestAssetGroupCollection(ctx context.Context, assetGroupID int32) (model.AssetGroupCollection, error)

func (*BloodhoundDB) GetOrderedAssetGroupTagTiers ¶

func (s *BloodhoundDB) GetOrderedAssetGroupTagTiers(ctx context.Context) ([]model.AssetGroupTag, error)

func (*BloodhoundDB) GetPermission ¶

func (s *BloodhoundDB) GetPermission(ctx context.Context, id int) (model.Permission, error)

GetPermission retrieves a row in the Permissions table corresponding to the ID provided SELECT * FROM permissions WHERE permission_id = ...

func (*BloodhoundDB) GetPrimaryDisplayKinds ¶

func (s *BloodhoundDB) GetPrimaryDisplayKinds(ctx context.Context) (graphschema.PrimaryDisplayKinds, error)

GetPrimaryDisplayKinds - returns a map of all node kinds that are display kinds. custom_node_kinds is the source of truth for display node kinds. This includes schema-backed display kinds (mirrored on extension upsert), schemaless kinds encountered during ingest, and synthetic node kinds created by analysis (e.g. Zone).

Source kinds (from the source_kinds registry, e.g. Base, AZBase, or an OpenGraph source kind like GithubBase) are also included in the map and flagged with IsSourceKind. This allows PrimaryDisplayKind to generically treat any source kind as a base/fallback kind rather than relying on hardcoded knowledge of the built-in AD and Azure base kinds.

func (*BloodhoundDB) GetPrincipalKindsByEnvironmentId ¶

func (s *BloodhoundDB) GetPrincipalKindsByEnvironmentId(ctx context.Context, environmentId int32) (model.SchemaEnvironmentPrincipalKinds, error)

GetPrincipalKindsByEnvironmentID - retrieves a schema environments principal kind by environment id.

func (*BloodhoundDB) GetPrincipalKindsGraphKinds ¶

func (s *BloodhoundDB) GetPrincipalKindsGraphKinds(ctx context.Context) (graph.Kinds, error)

func (*BloodhoundDB) GetPublicSavedQueries ¶

func (s *BloodhoundDB) GetPublicSavedQueries(ctx context.Context) (model.SavedQueries, error)

GetPublicSavedQueries returns all the queries that were shared publicly

func (*BloodhoundDB) GetRemediationByFindingId ¶

func (s *BloodhoundDB) GetRemediationByFindingId(ctx context.Context, findingId int32) (model.Remediation, error)

func (*BloodhoundDB) GetRemediationByFindingName ¶

func (s *BloodhoundDB) GetRemediationByFindingName(ctx context.Context, findingName string) (model.Remediation, error)

func (*BloodhoundDB) GetRole ¶

func (s *BloodhoundDB) GetRole(ctx context.Context, id int32) (model.Role, error)

GetRole retrieves the role associated with the provided ID SELECT * FROM roles WHERE role_id = ....

func (*BloodhoundDB) GetRoles ¶

func (s *BloodhoundDB) GetRoles(ctx context.Context, ids []int32) (model.Roles, error)

GetRoles retrieves all rows in the Roles table corresponding to the provided list of IDs SELECT * FROM roles where ID in (...)

func (*BloodhoundDB) GetSAMLProvider ¶

func (s *BloodhoundDB) GetSAMLProvider(ctx context.Context, id int32) (model.SAMLProvider, error)

GetSAMLProvider returns a SAML provider corresponding to the ID provided SELECT * FOM saml_providers WHERE id = ..

func (*BloodhoundDB) GetSAMLProviderUsers ¶

func (s *BloodhoundDB) GetSAMLProviderUsers(ctx context.Context, id int32) (model.Users, error)

GetSAMLProviderUsers returns all users that are bound to the SAML provider ID provided SELECT * FROM users WHERE saml_provider_id = ..

func (*BloodhoundDB) GetSSOProviderById ¶

func (s *BloodhoundDB) GetSSOProviderById(ctx context.Context, id int32) (model.SSOProvider, error)

func (*BloodhoundDB) GetSSOProviderBySlug ¶

func (s *BloodhoundDB) GetSSOProviderBySlug(ctx context.Context, slug string) (model.SSOProvider, error)

func (*BloodhoundDB) GetSSOProviderUsers ¶

func (s *BloodhoundDB) GetSSOProviderUsers(ctx context.Context, id int) (model.Users, error)

GetSSOProviderUsers returns all the users associated with a given sso provider

func (*BloodhoundDB) GetSavedQueriesByExtensionID ¶

func (s *BloodhoundDB) GetSavedQueriesByExtensionID(ctx context.Context, schemaExtensionID int32) (model.SavedQueries, error)

func (*BloodhoundDB) GetSavedQueriesOwnedBy ¶

func (s *BloodhoundDB) GetSavedQueriesOwnedBy(ctx context.Context, userID uuid.UUID) (model.SavedQueries, error)

func (*BloodhoundDB) GetSavedQuery ¶

func (s *BloodhoundDB) GetSavedQuery(ctx context.Context, savedQueryID int64) (model.SavedQuery, error)

func (*BloodhoundDB) GetSavedQueryPermissions ¶

func (s *BloodhoundDB) GetSavedQueryPermissions(ctx context.Context, queryID int64) ([]model.SavedQueriesPermissions, error)

GetSavedQueryPermissions - returns permission data if the user owns the query or the query is public

func (*BloodhoundDB) GetSchemaFindingById ¶

func (s *BloodhoundDB) GetSchemaFindingById(ctx context.Context, findingId int32) (model.SchemaFinding, error)

GetSchemaFindingById - retrieves a schema finding by id.

func (*BloodhoundDB) GetSchemaFindingByName ¶

func (s *BloodhoundDB) GetSchemaFindingByName(ctx context.Context, name string) (model.SchemaFinding, error)

GetSchemaFindingByName - retrieves a schema finding by finding name.

func (*BloodhoundDB) GetSchemaFindings ¶

func (s *BloodhoundDB) GetSchemaFindings(ctx context.Context, filters model.Filters, sort model.Sort, skip, limit int) ([]model.SchemaFinding, int, error)

GetSchemaFindings - retrieves schema findings filtered and sorted by the given criteria. If sorting is not provided, it will default to name ascending.

func (*BloodhoundDB) GetSchemaFindingsByExtensionId ¶

func (s *BloodhoundDB) GetSchemaFindingsByExtensionId(ctx context.Context, extensionId int32) ([]model.SchemaFinding, error)

GetSchemaFindingsByExtensionId - returns all findings by extension id.

func (*BloodhoundDB) GetScopeForSavedQuery ¶

func (s *BloodhoundDB) GetScopeForSavedQuery(ctx context.Context, queryID int64, userID uuid.UUID) (SavedQueryScopes, error)

GetScopeForSavedQuery returns the possible scopes for a query and user.

func (*BloodhoundDB) GetSelectorNodesBySelectorIds ¶

func (s *BloodhoundDB) GetSelectorNodesBySelectorIds(ctx context.Context, selectorIds ...int) ([]model.AssetGroupSelectorNode, error)

func (*BloodhoundDB) GetSelectorNodesBySelectorIdsFilteredAndPaginated ¶

func (s *BloodhoundDB) GetSelectorNodesBySelectorIdsFilteredAndPaginated(ctx context.Context, sqlFilter model.SQLFilter, sort model.Sort, skip, limit int, selectorIds ...int) ([]model.AssetGroupSelectorNode, int, error)

func (*BloodhoundDB) GetSelectorsByMemberId ¶

func (s *BloodhoundDB) GetSelectorsByMemberId(ctx context.Context, memberId int, assetGroupTagId int) (model.AssetGroupTagSelectors, error)

func (*BloodhoundDB) GetSharedSavedQueries ¶

func (s *BloodhoundDB) GetSharedSavedQueries(ctx context.Context, userID uuid.UUID) (model.SavedQueries, error)

GetSharedSavedQueries returns all the saved queries that the given userID has access to, including global queries

func (*BloodhoundDB) GetSourceKindByID ¶

func (s *BloodhoundDB) GetSourceKindByID(ctx context.Context, id int) (model.SourceKind, error)

GetSourceKindByID - retrieves source_kind by source_kind table id

func (*BloodhoundDB) GetSourceKindByName ¶

func (s *BloodhoundDB) GetSourceKindByName(ctx context.Context, name string) (model.SourceKind, error)

func (*BloodhoundDB) GetSourceKinds ¶

func (s *BloodhoundDB) GetSourceKinds(ctx context.Context) ([]model.SourceKind, error)

func (*BloodhoundDB) GetSourceKindsByIDs ¶

func (s *BloodhoundDB) GetSourceKindsByIDs(ctx context.Context, ids ...int) ([]model.SourceKind, error)

func (*BloodhoundDB) GetTimeRangedAssetGroupCollections ¶

func (s *BloodhoundDB) GetTimeRangedAssetGroupCollections(ctx context.Context, assetGroupID int32, from int64, to int64, order string) (model.AssetGroupCollections, error)

func (*BloodhoundDB) GetTraversableRelationshipKindsByExtensionID ¶

func (s *BloodhoundDB) GetTraversableRelationshipKindsByExtensionID(ctx context.Context, extensionID int32) (model.GraphSchemaRelationshipKinds, error)

GetTraversableRelationshipKindsByExtensionID returns all traversable relationship kinds for a given schema extension. This is a purpose-built query for the analysis pipeline that needs traversable edges for graph traversal.

func (*BloodhoundDB) GetUser ¶

func (s *BloodhoundDB) GetUser(ctx context.Context, id uuid.UUID) (model.User, error)

GetUser returns the user associated with the provided ID SELECT * FROM users WHERE id = ...

func (*BloodhoundDB) GetUserSession ¶

func (s *BloodhoundDB) GetUserSession(ctx context.Context, id int64) (model.UserSession, error)

GetUserSession retrieves the UserSession row associated with the provided ID SELECT * FROM user_sessions WHERE id = ...

func (*BloodhoundDB) GetUserToken ¶

func (s *BloodhoundDB) GetUserToken(ctx context.Context, userId, tokenId uuid.UUID) (model.AuthToken, error)

func (*BloodhoundDB) HasAnalysisRequest ¶

func (s *BloodhoundDB) HasAnalysisRequest(ctx context.Context) bool

func (*BloodhoundDB) HasCollectedGraphDataDeletionRequest ¶

func (s *BloodhoundDB) HasCollectedGraphDataDeletionRequest(ctx context.Context) (model.AnalysisRequest, bool)

func (*BloodhoundDB) HasInstallation ¶

func (s *BloodhoundDB) HasInstallation(ctx context.Context) (bool, error)

HasInstallation checks if an installation exists SELECT CASE WHEN EXISTS (SELECT 1 FROM installations) THEN true ELSE false END

func (*BloodhoundDB) InitializeSecretAuth ¶

func (s *BloodhoundDB) InitializeSecretAuth(ctx context.Context, adminUser model.User, authSecret model.AuthSecret) (model.Installation, error)

InitializeSecretAuth creates new AuthSecret and User entries based on the input provided

func (*BloodhoundDB) InsertSelectorNodes ¶

func (s *BloodhoundDB) InsertSelectorNodes(ctx context.Context, nodes []model.AssetGroupSelectorNode) error

func (*BloodhoundDB) IsEnabled ¶

func (s *BloodhoundDB) IsEnabled(ctx context.Context, key string) (bool, error)

func (*BloodhoundDB) IsSavedQueryPublic ¶

func (s *BloodhoundDB) IsSavedQueryPublic(ctx context.Context, queryID int64) (bool, error)

IsSavedQueryPublic returns true or false whether a provided saved query is public

func (*BloodhoundDB) IsSavedQuerySharedToUser ¶

func (s *BloodhoundDB) IsSavedQuerySharedToUser(ctx context.Context, queryID int64, userID uuid.UUID) (bool, error)

IsSavedQuerySharedToUser returns true or false whether a provided saved query is shared with a provided user

func (*BloodhoundDB) IsSavedQuerySharedToUserOrPublic ¶

func (s *BloodhoundDB) IsSavedQuerySharedToUserOrPublic(ctx context.Context, queryID int64, userID uuid.UUID) (bool, error)

func (*BloodhoundDB) ListAuditLogs ¶

func (s *BloodhoundDB) ListAuditLogs(ctx context.Context, before, after time.Time, offset, limit int, order string, filter model.SQLFilter) (model.AuditLogs, int, error)

func (*BloodhoundDB) ListSavedQueries ¶

func (s *BloodhoundDB) ListSavedQueries(ctx context.Context, scope string, userID uuid.UUID, order string, filter model.SQLFilter, skip, limit int) ([]model.ScopedSavedQuery, int, error)

func (*BloodhoundDB) LookupActiveSessionsByUser ¶

func (s *BloodhoundDB) LookupActiveSessionsByUser(ctx context.Context, user model.User) ([]model.UserSession, error)

func (*BloodhoundDB) LookupUser ¶

func (s *BloodhoundDB) LookupUser(ctx context.Context, name string) (model.User, error)

LookupUser retrieves the User row associated with the provided name. The name is matched against both the principal_name and email address fields of a user.

SELECT * FROM users WHERE lower(principal_name) = ... or lower(email_address) = ...

func (*BloodhoundDB) MaybeAuditableTransaction ¶

func (s *BloodhoundDB) MaybeAuditableTransaction(ctx context.Context, auditDisabled bool, auditEntry model.AuditEntry, f func(tx *gorm.DB) error, opts ...*sql.TxOptions) error

func (*BloodhoundDB) Migrate ¶

func (s *BloodhoundDB) Migrate(ctx context.Context) error

func (*BloodhoundDB) Pool ¶

func (s *BloodhoundDB) Pool() *pgxpool.Pool

Pool returns the underlying pgx connection pool.

func (*BloodhoundDB) PopulateExtensionData ¶

func (s *BloodhoundDB) PopulateExtensionData(ctx context.Context) error

func (*BloodhoundDB) RawDelete ¶

func (s *BloodhoundDB) RawDelete(value any) error

func (*BloodhoundDB) RegisterSourceKind ¶

func (s *BloodhoundDB) RegisterSourceKind(ctx context.Context) func(sourceKind graph.Kind) error

RegisterSourceKind returns a function that inserts a source kind by name, using the provided context. The returned function can be called later with just the name. The function is curried in this way because it is primarily used in datapipe during ingest decoding when there is no ctx in scope.

Since this function inserts into the kinds table, the business logic calling this func must also call the DAWGS RefreshKinds function to ensure the kinds are reloaded into the in memory kind map.

func (*BloodhoundDB) RequestAnalysis ¶

func (s *BloodhoundDB) RequestAnalysis(ctx context.Context, requestedBy string, analysisMode model.AnalysisMode) error

RequestAnalysis will request an analysis be executed, as long as there isn't an existing analysis request or collected graph data deletion request, then it no-ops

func (*BloodhoundDB) RequestCollectedGraphDataDeletion ¶

func (s *BloodhoundDB) RequestCollectedGraphDataDeletion(ctx context.Context, request model.AnalysisRequest) error

RequestCollectedGraphDataDeletion will request collected graph data be deleted, if an analysis request is present, it will overwrite that.

func (*BloodhoundDB) ResetLastGraphOptimizeTime ¶

func (s *BloodhoundDB) ResetLastGraphOptimizeTime(ctx context.Context) error

func (*BloodhoundDB) SQLDB ¶

func (s *BloodhoundDB) SQLDB() (*sql.DB, error)

SQLDB returns the underlying *sql.DB handle managed by GORM.

func (*BloodhoundDB) SanitizeUpdateAssetGroupTagRequireCertify ¶

func (s *BloodhoundDB) SanitizeUpdateAssetGroupTagRequireCertify(tag *model.AssetGroupTag)

func (*BloodhoundDB) SavedQueryBelongsToUser ¶

func (s *BloodhoundDB) SavedQueryBelongsToUser(ctx context.Context, userID uuid.UUID, savedQueryID int64) (bool, error)

func (*BloodhoundDB) Scope ¶

func (s *BloodhoundDB) Scope(scopeFuncs ...ScopeFunc) *gorm.DB

func (*BloodhoundDB) SetConfigurationParameter ¶

func (s *BloodhoundDB) SetConfigurationParameter(ctx context.Context, parameter appcfg.Parameter) error

func (*BloodhoundDB) SetDatapipeStatus ¶

func (s *BloodhoundDB) SetDatapipeStatus(ctx context.Context, status model.DatapipeStatus) error

func (*BloodhoundDB) SetFlag ¶

func (s *BloodhoundDB) SetFlag(ctx context.Context, flag appcfg.FeatureFlag) error

func (*BloodhoundDB) SetLastAnalysisStartTime ¶

func (s *BloodhoundDB) SetLastAnalysisStartTime(ctx context.Context) error

This should be called at the start of analysis processing (not every datapipe tick, but start of real work)

func (*BloodhoundDB) SetLastGraphOptimizeTime ¶

func (s *BloodhoundDB) SetLastGraphOptimizeTime(ctx context.Context) error

This should be called after a successful graph storage optimization run

func (*BloodhoundDB) SetNextScheduledAnalysisStartTime ¶

func (s *BloodhoundDB) SetNextScheduledAnalysisStartTime(ctx context.Context, time null.Time) error

No-op in BHCE

func (*BloodhoundDB) SetUserSessionFlag ¶

func (s *BloodhoundDB) SetUserSessionFlag(ctx context.Context, userSession *model.UserSession, key model.SessionFlagKey, state bool) error

corresponding retrival function is model.UserSession.GetFlag()

func (*BloodhoundDB) SweepAssetGroupCollections ¶

func (s *BloodhoundDB) SweepAssetGroupCollections(ctx context.Context)

func (*BloodhoundDB) SweepSAMLConsumedIdentifiers ¶

func (s *BloodhoundDB) SweepSAMLConsumedIdentifiers(ctx context.Context) error

SweepSAMLConsumedIdentifiers deletes all SAMLResponse and assertion identifiers that have expired

func (*BloodhoundDB) SweepSessions ¶

func (s *BloodhoundDB) SweepSessions(ctx context.Context)

SweepSessions deletes all sessions that have already expired

func (*BloodhoundDB) TerminateUserSessionsBySSOProvider ¶

func (s *BloodhoundDB) TerminateUserSessionsBySSOProvider(ctx context.Context, ssoProvider model.SSOProvider) error

TerminateUserSessionsBySSOProvider terminates all sessions associated with a specific sso provider

func (*BloodhoundDB) Transaction ¶

func (s *BloodhoundDB) Transaction(ctx context.Context, fn func(tx *BloodhoundDB) error, opts ...*sql.TxOptions) error

Transaction executes the given function within a database transaction. The function receives a new BloodhoundDB instance backed by the transaction, allowing all existing methods to participate in the transaction. If the function returns an error, the transaction is rolled back. If the function returns nil, the transaction is committed. Optional sql.TxOptions can be provided to configure isolation level and read-only mode.

func (*BloodhoundDB) UpdateAssetGroup ¶

func (s *BloodhoundDB) UpdateAssetGroup(ctx context.Context, assetGroup model.AssetGroup) error

func (*BloodhoundDB) UpdateAssetGroupSelectors ¶

func (s *BloodhoundDB) UpdateAssetGroupSelectors(ctx context.Context, assetGroup model.AssetGroup, selectorSpecs []model.AssetGroupSelectorSpec, systemSelector bool) (model.UpdatedAssetGroupSelectors, error)

func (*BloodhoundDB) UpdateAssetGroupTag ¶

func (s *BloodhoundDB) UpdateAssetGroupTag(ctx context.Context, user model.User, tag model.AssetGroupTag) (model.AssetGroupTag, error)

func (*BloodhoundDB) UpdateAssetGroupTagSelector ¶

func (s *BloodhoundDB) UpdateAssetGroupTagSelector(ctx context.Context, actorId, emailAddress string, selector model.AssetGroupTagSelector) (model.AssetGroupTagSelector, error)

func (*BloodhoundDB) UpdateAuthSecret ¶

func (s *BloodhoundDB) UpdateAuthSecret(ctx context.Context, authSecret model.AuthSecret) error

UpdateAuthSecret updates the auth secret with the input struct specified UPDATE auth_secrets SET digest = .., hmac_method = ..., expires_at = ... WHERE user_id = ....

func (*BloodhoundDB) UpdateAuthToken ¶

func (s *BloodhoundDB) UpdateAuthToken(ctx context.Context, authToken model.AuthToken) error

UpdateAuthToken updates all fields in the AuthToken row as specified in the provided struct UPDATE auth_tokens SET key = ..., hmac_method = ..., last_access = ... WHERE user_id = ... AND client_id = ...

func (*BloodhoundDB) UpdateAuthTokenExpiration ¶

func (s *BloodhoundDB) UpdateAuthTokenExpiration(ctx context.Context) error

Updates all auth tokens expiration field when API key expiration is enabled or disabled

func (*BloodhoundDB) UpdateCertificationBySelectorNode ¶

func (s *BloodhoundDB) UpdateCertificationBySelectorNode(ctx context.Context, inputs []UpdateCertificationBySelectorNodeInput) error

func (*BloodhoundDB) UpdateCustomNodeKind ¶

func (s *BloodhoundDB) UpdateCustomNodeKind(ctx context.Context, customNodeKind model.CustomNodeKind) (model.CustomNodeKind, error)

func (*BloodhoundDB) UpdateEnvironment ¶

func (s *BloodhoundDB) UpdateEnvironment(ctx context.Context, environment model.SchemaEnvironment) (model.SchemaEnvironment, error)

UpdateEnvironment - updates the source_kind_id of an existing schema environment by id. Uses a CTE to JOIN the kinds table against the RETURNING clause so that EnvironmentKindName is populated in the returned struct without a separate re-fetch.

func (*BloodhoundDB) UpdateEnvironmentWithPrincipalKinds ¶

func (s *BloodhoundDB) UpdateEnvironmentWithPrincipalKinds(ctx context.Context, existing model.SchemaEnvironment, input model.EnvironmentInput) (model.SchemaEnvironment, error)

UpdateEnvironmentWithPrincipalKinds translates FK names, updates the environment row if source kind changed, and reconciles its principal kinds.

func (*BloodhoundDB) UpdateFindingWithRemediation ¶

func (s *BloodhoundDB) UpdateFindingWithRemediation(ctx context.Context, existing model.SchemaFinding, input model.RelationshipFindingInput) (model.SchemaFinding, error)

UpdateFindingWithRemediation translates FK names, updates the finding, and updates its 1:1 remediation.

func (*BloodhoundDB) UpdateGraphSchemaExtension ¶

func (s *BloodhoundDB) UpdateGraphSchemaExtension(ctx context.Context, extension model.GraphSchemaExtension) (model.GraphSchemaExtension, error)

UpdateGraphSchemaExtension updates an existing Graph Schema Extension. Only the `name`, `display_name`, and `version` fields are updatable. It returns the updated extension, or an error if the update violates schema constraints or did not succeed.

func (*BloodhoundDB) UpdateGraphSchemaNodeKind ¶

func (s *BloodhoundDB) UpdateGraphSchemaNodeKind(ctx context.Context, schemaNodeKind model.GraphSchemaNodeKind) (model.GraphSchemaNodeKind, error)

UpdateGraphSchemaNodeKind - updates a row in the schema_node_kinds table based on the provided id. It will return an error if the target schema node kind does not exist or if any of the updates violate the schema constraints.

This function does NOT update the DAWGS name column since the schema_node_kinds table FKs to the DAWGS kind table, and that table is append only. A new node kind should be created instead.

func (*BloodhoundDB) UpdateGraphSchemaNodeKindIconById ¶

func (s *BloodhoundDB) UpdateGraphSchemaNodeKindIconById(ctx context.Context, id int32, icon graphschema.DisplayNodeIcon) (model.GraphSchemaNodeKind, error)

UpdateGraphSchemaNodeKindIconByKindId - updates the icon name and color for a row in the schema_node_kinds table based on the provided id. It will return an error if the target schema node kind does not exist.

func (*BloodhoundDB) UpdateGraphSchemaProperty ¶

func (s *BloodhoundDB) UpdateGraphSchemaProperty(ctx context.Context, property model.GraphSchemaProperty) (model.GraphSchemaProperty, error)

UpdateGraphSchemaProperty - updates a row in the schema_properties table based on the provided id. It will return an error if the target property does not exist or if any of the updates violate the schema constraints.

func (*BloodhoundDB) UpdateGraphSchemaRelationshipKind ¶

func (s *BloodhoundDB) UpdateGraphSchemaRelationshipKind(ctx context.Context, schemaRelationshipKind model.GraphSchemaRelationshipKind) (model.GraphSchemaRelationshipKind, error)

UpdateGraphSchemaRelationshipKind - updates a row in the schema_relationship_kinds table based on the provided id. It will return an error if the target schema edge kind does not exist or if any of the updates violate the schema constraints.

This function does NOT update the DAWGS name column since the schema_relationship_kinds table FKs to the DAWGS kind table, and that table is append only. A new edge kind should be created instead.

func (*BloodhoundDB) UpdateIngestJob ¶

func (s *BloodhoundDB) UpdateIngestJob(ctx context.Context, job model.IngestJob) error

func (*BloodhoundDB) UpdateKindInfo ¶

func (s *BloodhoundDB) UpdateKindInfo(ctx context.Context, kindInfo model.GraphSchemaKindInfo) (model.GraphSchemaKindInfo, error)

func (*BloodhoundDB) UpdateLastAnalysisCompleteTime ¶

func (s *BloodhoundDB) UpdateLastAnalysisCompleteTime(ctx context.Context) error

This should be called at the end of a successful analysis run (not always every analysis)

func (*BloodhoundDB) UpdateOIDCProvider ¶

func (s *BloodhoundDB) UpdateOIDCProvider(ctx context.Context, ssoProvider model.SSOProvider) (model.OIDCProvider, error)

UpdateOIDCProvider updates an OIDC provider as well as the associated SSO provider

func (*BloodhoundDB) UpdateOpenGraphAssetGroupTagSelector ¶

func (s *BloodhoundDB) UpdateOpenGraphAssetGroupTagSelector(ctx context.Context, extensionId int32, input model.AssetGroupTagSelector) (model.AssetGroupTagSelector, error)

func (*BloodhoundDB) UpdateRemediation ¶

func (s *BloodhoundDB) UpdateRemediation(ctx context.Context, findingId int32, shortDescription string, longDescription string, shortRemediation string, longRemediation string) (model.Remediation, error)

func (*BloodhoundDB) UpdateSAMLIdentityProvider ¶

func (s *BloodhoundDB) UpdateSAMLIdentityProvider(ctx context.Context, ssoProvider model.SSOProvider) (model.SAMLProvider, error)

CreateSAMLProvider updates a saml_providers row using the data in the input struct UPDATE saml_identity_providers SET (...) VALUES (...) WHERE id = ...

func (*BloodhoundDB) UpdateSSOProvider ¶

func (s *BloodhoundDB) UpdateSSOProvider(ctx context.Context, ssoProvider model.SSOProvider) (model.SSOProvider, error)

UpdateSSOProvider updates an entry in the sso_providers table

func (*BloodhoundDB) UpdateSavedQuery ¶

func (s *BloodhoundDB) UpdateSavedQuery(ctx context.Context, savedQuery model.SavedQuery) (model.SavedQuery, error)

func (*BloodhoundDB) UpdateSchemaFinding ¶

func (s *BloodhoundDB) UpdateSchemaFinding(ctx context.Context, finding model.SchemaFinding) (model.SchemaFinding, error)

UpdateSchemaFinding - updates the type, display_name, pz_display_name, kind_id, and environment_id of an existing schema finding by id. Type is included because findings may transition between SchemaFindingTypeRelationship and SchemaFindingTypeList as extension definitions evolve.

func (*BloodhoundDB) UpdateSelectorNodes ¶

func (s *BloodhoundDB) UpdateSelectorNodes(ctx context.Context, nodes []model.AssetGroupSelectorNode) error

func (*BloodhoundDB) UpdateTierPositions ¶

func (s *BloodhoundDB) UpdateTierPositions(ctx context.Context, user model.User, orderedTags model.AssetGroupTags, ignoredTagIds ...int) error

func (*BloodhoundDB) UpdateUser ¶

func (s *BloodhoundDB) UpdateUser(ctx context.Context, user model.User) error

UpdateUser updates the roles associated with the user according to the input struct UPDATE users SET roles = ....

func (*BloodhoundDB) UpsertKind ¶

func (s *BloodhoundDB) UpsertKind(ctx context.Context, name string) (model.Kind, error)

UpsertKind Since this function inserts into the kinds table, the business logic calling this func must also call the DAWGS RefreshKinds function to ensure the kinds are reloaded into the in memory kind map.

func (*BloodhoundDB) UpsertOpenGraphExtension ¶

func (s *BloodhoundDB) UpsertOpenGraphExtension(ctx context.Context, graphExtensionInput model.GraphExtensionInput) (model.GraphExtensionUpsertResult, error)

UpsertOpenGraphExtension - upserts the incoming graph extension by checking to see if the extension exists already, if so, deleting it and inserting the new extension.

Each entity set is diffed against the input: absent rows are deleted, matching rows are updated in place with their IDs preserved, and new rows are created. All mutations run inside a single transaction that rolls back on any error.

Returns the persisted extension and reconciliation results after a successful commit. Returns ErrGraphExtensionBuiltIn if the named extension is a built-in and cannot be modified.

func (*BloodhoundDB) Wipe ¶

func (s *BloodhoundDB) Wipe(ctx context.Context) error

func (*GormLogAdapter) Error ¶

func (s *GormLogAdapter) Error(ctx context.Context, msg string, data ...any)

func (*GormLogAdapter) Info ¶

func (s *GormLogAdapter) Info(ctx context.Context, msg string, data ...any)

func (*GormLogAdapter) LogMode ¶

func (s *GormLogAdapter) LogMode(level logger.LogLevel) logger.Interface

func (*GormLogAdapter) Trace ¶

func (s *GormLogAdapter) Trace(ctx context.Context, begin time.Time, fc func() (string, int64), err error)

func (*GormLogAdapter) Warn ¶

func (s *GormLogAdapter) Warn(ctx context.Context, msg string, data ...any)