Skip to content

fix: clarify phpMyAdmin access permissions by platform - #3102

Open
sjinks wants to merge 2 commits into
trunkfrom
pltfrm-1650-vip-cli-phpmyadmin-cli-note-is-misleading-for-wp-cloud-sites
Open

sjinks wants to merge 2 commits into
trunkfrom
pltfrm-1650-vip-cli-phpmyadmin-cli-note-is-misleading-for-wp-cloud-sites

Conversation

@sjinks

@sjinks sjinks commented Oct 9, 2026 •

Copy link
Copy Markdown
Member

Summary

Addresses PLTFRM-1650: vip db phpmyadmin incorrectly described WP Cloud sessions as read-only.

Both Node.js and Go now request the nullable isK8sResident environment field and select the access note accordingly:

  • true (VIP Kubernetes): retain the read-only warning.
  • false (WP Cloud): print no access note.
  • null or omitted: retain the general note explaining the difference between platforms.

Command help and examples no longer describe all sessions as read-only. Database permissions, --silent, and existing output channels remain unchanged.

Regression coverage includes both app lookup paths, all four metadata cases, silent output, and real Node/Go command and help comparisons. Existing documented output-channel drift is unchanged.

Validation

  • Node phpMyAdmin tests: 10 passed.
  • Focused Go command, app context, and phpMyAdmin tests passed with -race; the full internal/appctx package also passed with -race.
  • Real Node/Go differential checks passed for all metadata cases, silent output, both help views, and existing print/silent/error scenarios, with no test skips.
  • Node build, type-check, focused ESLint, formatting checks, make lint, make verify-gql-stale, and git diff --check passed.

The full Go suite was not run because browser-stubbing follow-up #3098 remains separate.

Address PLTFRM-1650 in both Node.js and Go command notes and help text.
Copilot AI balanced review requested due to automatic review settings October 9, 2026 14:43
@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The wording is consistent across both runtimes and is covered by focused unit and parity regressions.

0 open findings

What changed in this PR

Clarifies platform-specific phpMyAdmin permissions consistently across the Node.js and Go CLIs.

Changes:

  • Replaces the blanket read-only warning with platform-specific guidance.
  • Removes read-only wording from command help and examples.
  • Adds unit and differential parity coverage and refreshes drift fingerprints.
File Description
src/​commands/​phpmyadmin.ts Updates the Node.js access note.
src/​bin/​vip-db.ts Makes parent help platform-neutral.
src/​bin/​vip-db-phpmyadmin.ts Updates the command example.
cmd/​vip-next/​commands/​db_phpmyadmin.go Updates Go help and access note.
cmd/​vip-next/​commands/​db_phpmyadmin_test.go Tests Go note, help, and silent behavior.
__tests__/​commands/​phpmyadmin.ts Tests Node.js note suppression.
internal/​parity/​phpmyadmin_scenario_test.go Adds cross-runtime note and help checks.
testdata/​parity/​phpmyadmin-print.yaml Refreshes print drift fingerprint.
testdata/​parity/​phpmyadmin-error.yaml Refreshes error drift fingerprint.
testdata/​parity/​phpmyadmin-silent.yaml Clarifies silent-output expectations.

🧠 Review effort: Balanced


💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@sonarqubecloud

sonarqubecloud Bot commented Oct 9, 2026

Copy link
Copy Markdown

@sjinks sjinks self-assigned this Oct 9, 2026
@sjinks
sjinks requested a balanced review from Copilot October 9, 2026 14:58

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

Both runtimes consistently implement the scoped behavior with comprehensive resolver, command, and differential coverage.

0 open findings

Files not reviewed (1)
  • internal/gql/generated.go: Generated file

🧠 Review effort: Balanced

@sjinks
sjinks requested a review from a team October 9, 2026 15:11
if opened != "" {
t.Errorf("--print must not open browser; got %q", opened)
}
if !strings.Contains(stderr.String(), "Note: phpMyAdmin sessions are read-only on VIP Kubernetes and read-write on WP Cloud.") {

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we shouldn't expose this implementation detail.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants