Class QueryExtractionService

Re-establishes saved queries' facts from their SQL and the database server, on demand: the same extraction a save of a changed query runs, without changing the SQL. Every entry point (the Query.RefreshExtraction remote operation, mj query refresh, CodeGen's re-bind pass) goes through this service, so the same authorization applies to all of them:

• the caller needs Update on MJ: Queries and Create, Update and Delete on its derived child entities, for a dry run too;
• the caller must be able to read every entity the query reads, with no field denied on any of them, because the report and the written rows expose their columns;
• a refusal of a single query reads exactly like "not found"; a bulk run reports such a query as NotPermitted, with no reason.

Each query is refreshed in its own transaction on the caller's provider, and the child rows are written as the caller, so each write's own permission check also applies. A bulk run refreshes the queries a composition depends on before the queries that compose them.