Repository navigation
Delete the DebugClear API before release #999
Description
The public Debug.DebugClear RPC deletes all persistent application state. While it is useful for development, there is no method-level authorization or server side role restricting it to a dedicated administrator.
Although authorization could be designed for this operation, exposing a remotely callable global wipe is unnecessary for the production API. It also requires the normal ateapi database role to have TRUNCATE privileges, which conflicts with the least-privilege runtime role design in #997
Activity
jpbetz commentedon Sep 1, 2026
/assign
#1346 drops the API and retain the test-only capability
api: delete the DebugClear RPC and the Debug service (#1346)