Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

gate: fresh session per plugin activation to isolate RLS errors

Browse Source
This commit is contained in:
Agent Zero
2026-07-31 09:43:29 +02:00
parent ab8d878bc7
commit fa96466a50
1 changed files with 18 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/main.py
+11 -13
View File
@@ -220,26 +220,24 @@ async def lifespan(app: FastAPI):
logger.info(f"Plugin {name} is inactive — skipping activation")
continue
# Activate plugin with tenant context set for each tenant
# Activate plugin with a FRESH session per plugin to avoid RLS state leakage
# RLS fail-closed requires app.current_tenant_id for tenant-table writes.
# Plugin activation may fail on duplicate cron job inserts — this is
# harmless since cron jobs already exist from previous startups.
try:
# Plugin activation may fail on duplicate cron job inserts — this is harmless
# since cron jobs already exist from previous startups.
plugin_activated = False
for tenant_id in all_tenant_ids:
try:
await set_tenant_context(db, tenant_id)
await plugin.on_activate(db, container, event_bus)
await db.flush()
async with async_session() as plugin_db:
await set_tenant_context(plugin_db, tenant_id)
await plugin.on_activate(plugin_db, container, event_bus)
await plugin_db.flush()
await plugin_db.commit()
plugin_activated = True
except Exception as exc:
logger.warning(f"[STARTUP] Plugin {name} activation issue for tenant {tenant_id}: {exc}")
await db.rollback()
db.expunge_all() # Clear pending objects from failed INSERT
break
except Exception as exc:
logger.warning(f"[STARTUP] Plugin {name} activation failed: {exc}")
await db.rollback()
db.expunge_all()
if plugin_activated:
plugin_record.status = "active"
logger.info(f"[STARTUP] Activated plugin: {name}")