Critical-risk tools in QuintaDB
27 of the 150 tools in QuintaDB are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
delete_action_ruleDestructiveRemove an automation (an action rule) from a table. Cannot be undone. Ids come from list_action_rules.
-
delete_calendarDestructiveRemove a calendar from the project and from every portal menu that shows it. Cannot be undone. Ids come from list_calendars.
-
delete_chartDestructiveRemove a chart from the project and from every portal menu that shows it. Cannot be undone. Ids come from list_charts.
-
delete_dashboard_itemDestructiveRemove a card (widget) from a portal's dashboard. Only the card goes; the table, report or chart it showed stays. The person confirms it first.
-
delete_few_recordsDestructiveВидалити декілька записів одним запитом
-
delete_fieldDestructiveDelete a field (column, property) from a form. Irreversible — all data in this field will be lost. (remove field, drop column)
-
delete_formDestructiveВидалити форму та всі її записи. Незворотна операція. Не можна видалити єдину форму.
-
delete_formattingDestructiveRemove a formatting rule. The person confirms it first.
-
delete_mapDestructiveRemove a map from the project and from every portal menu that shows it. Cannot be undone. Ids come from list_maps.
-
delete_portalDestructiveRemove a whole portal: its pages, menu, dashboard and its portal users' accounts. The tables and records stay. The person confirms it first; it cannot be undone.
-
delete_portal_groupDestructiveВидалити групу порталу разом з правами і учасниками.
-
delete_portal_menu_itemDestructiveВидалити пункт меню порталу. section_id для top-level, item_id для підпункту підменю.
-
delete_portal_pageDestructiveRemove a page from a portal, with the menu items that lead to it. The person confirms it first. The portal's start page is refused: another start is chosen first.
-
delete_portal_userDestructiveВидалити юзера з порталу
-
delete_projectDestructiveВидалити проєкт (ставить hidden=true і запускає фоновий DeleteAppJob).
-
delete_recordDestructiveВидалити запис
-
delete_records_by_filterDestructiveМасове видалення записів за фільтром, переліком ID або всіх записів форми. Незворотна операція.
-
delete_reminderDestructiveВидалити нагадування.
-
delete_reportDestructiveRemove a report from its table and from every portal menu that shows it. The table and its records stay. Cannot be undone. Ids come from get_reports.
-
delete_saved_viewDestructiveВидалити збережений набір фільтрів пошуку.
-
delete_scheduleDestructiveВидалити розклад.
-
delete_team_groupDestructiveВидалити групу команди разом з усіма правами і учасниками.
-
delete_templateDestructiveВидалити шаблон (record/email/sms/telegram/whatsapp).
-
delete_webhookDestructiveВидалити вебхук.
-
remove_example_recordsDestructiveRemove the sample records that project generation added — what the person calls «the examples», «les exemples», «приклади», «примеры», sample, demo or test data. Deletes ONLY th...
-
remove_user_from_portal_groupDestructiveВидалити юзера з групи порталу. Передати user_id або email.
-
remove_user_from_team_groupDestructiveВидалити користувача з групи команди. Передати user_id або email.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.