Member Junction
    Preparing search index...

    Class RunAdhocQueryAction

    Action that executes read-only SQL SELECT queries for research purposes with security validation.

    Security — the same gates as the ExecuteAdhocQuery resolver:

    • Scope-limited sessions (magic-link and widget guests, resource-scoped links) are refused: raw SQL never applies the row-level filters that confine them.
    • The SQL runs only on the host's read-only database login (ActionEngineServer.GetReadOnlyProvider), never on the read-write pool; with no read-only login configured the action refuses.
    • The host's ad-hoc SQL checks (ActionEngineServer.AdhocSQLAuthorizer) must accept the SQL: MJServer registers ExecuteAdhocQuery's own check, so the SQL must be one read statement and every table it reads an entity view the caller may read in full. The host also limits the timeout.
    • It runs through the provider's ad-hoc read path (RunQuery with SQL), which accepts one read statement only, refuses functions that read outside the query, and enforces the timeout and row limit in the database.
    • The dangerous-keyword screen (SQLExpressionValidator) runs first.

    Performance Features:

    • Configurable row limits to prevent overwhelming results
    • Execution time tracking
    • Validation warnings for potentially slow queries
    // Simple SELECT query
    await runAction({
      ActionName: 'Run Ad-hoc Query',
      Params: [{
        Name: 'Query',
        Value: 'SELECT TOP 100 * FROM Customers WHERE Country = ''USA'''
      }]
    });

    // Query with timeout
    await runAction({
      ActionName: 'Run Ad-hoc Query',
      Params: [{
        Name: 'Query',
        Value: 'SELECT COUNT(*) FROM Orders GROUP BY CustomerID'
      }, {
        Name: 'Timeout',
        Value: 60
      }]
    });

    Hierarchy (View Summary)

    Index

    Constructors

    constructor

    Properties

    AuthorizesCaller

    Accessors

    SupportsAudience

    Methods

    InternalRunAction Run

    Constructors

    Properties

    AuthorizesCaller: boolean

    True when the action authorizes its caller itself, so a public entry point such as the RunAction mutation may run it for an authenticated user without an MJ: Action Authorizations link. Set it only on an action that either checks an authorization the caller must hold, or reads and writes only with the caller's own permissions. Leave it false for an action that acts with more authority than its caller, or that reaches data or sends messages the caller chooses but could not otherwise reach.

    The engine reads the marker only from the class that runs, never from its parent classes. A subclass that overrides a marked action must declare the marker again.

    Accessors

    • get SupportsAudience(): boolean

      Whether this action can bound what it returns to an audience (RunActionParams.Audience): everyone besides the caller who will see its output, such as the other participants of a shared conversation.

      false by default, and the engine enforces it: when a run's audience adds a reader beyond the caller, ActionEngineServer.RunAction refuses the action with result code AUDIENCE_UNSUPPORTED, without running it. Override to return true only when the action honours the audience in full — every record, snippet and count it returns is something every reader may see (pass the audience to the search engine, check each reader's entitlement to anything it scopes by, and leave out aggregates computed before that filtering).

      Returns boolean

    Methods

    Settings

    Member Visibility

    On This Page

    Constructors
    Properties
    Accessors
    Methods