safe read-only when using shell scripts

packages/web/src/appobj/DatabaseObjectAppObject.svelte

@@ -417,10 +417,7 @@
                 {
                   functionName: menu.functionName,
                   props: {
-                    connection: {
-                      ..._.omit(coninfo, ['_id', 'displayName']),
-                      ..._.pick(data, ['database']),
-                    },
+                    connection: extractShellConnection(coninfo, data.database),
                     ..._.pick(data, ['pureName', 'schemaName']),
                   },
                 },
@@ -629,6 +626,7 @@
   import ConfirmModal from '../modals/ConfirmModal.svelte';
   import { apiCall } from '../utility/api';
   import InputTextModal from '../modals/InputTextModal.svelte';
+  import { extractShellConnection } from '../impexp/createImpExpScript';
 
   export let data;
   export let passProps;

packages/web/src/datagrid/CollectionDataGridCore.svelte

@@ -112,6 +112,7 @@
   import { registerQuickExportHandler } from '../buttons/ToolStripExportButton.svelte';
   import registerCommand from '../commands/registerCommand';
   import ErrorInfo from '../elements/ErrorInfo.svelte';
+  import { extractShellConnection } from '../impexp/createImpExpScript';
   import ConfirmNoSqlModal from '../modals/ConfirmNoSqlModal.svelte';
   import ErrorMessageModal from '../modals/ErrorMessageModal.svelte';
   import ImportExportModal from '../modals/ImportExportModal.svelte';
@@ -202,10 +203,7 @@
       {
         functionName: 'queryReader',
         props: {
-          connection: {
-            ..._.omit(coninfo, ['_id', 'displayName']),
-            database,
-          },
+          connection: extractShellConnection(coninfo, database),
           sql: getExportQuery(),
         },
       },

packages/web/src/datagrid/SqlDataGridCore.svelte

@@ -69,6 +69,7 @@
   import { registerQuickExportHandler } from '../buttons/ToolStripExportButton.svelte';
 
   import registerCommand from '../commands/registerCommand';
+  import { extractShellConnection } from '../impexp/createImpExpScript';
   import ImportExportModal from '../modals/ImportExportModal.svelte';
   import { showModal } from '../modals/modalTools';
   import { apiCall } from '../utility/api';
@@ -187,10 +188,7 @@
       {
         functionName: 'queryReader',
         props: {
-          connection: {
-            ..._.omit(coninfo, ['_id', 'displayName']),
-            database,
-          },
+          connection: extractShellConnection(coninfo, database),
           sql: display.getExportQuery(),
         },
       },

packages/web/src/impexp/createImpExpScript.ts

@@ -4,6 +4,7 @@ import getAsArray from '../utility/getAsArray';
 import { getConnectionInfo } from '../utility/metadataLoaders';
 import { findEngineDriver, findObjectLike } from 'dbgate-tools';
 import { findFileFormat } from '../plugins/fileformats';
+import { getCurrentConfig } from '../stores';
 
 export function getTargetName(extensions, source, values) {
   const key = `targetName_${source}`;
@@ -33,17 +34,27 @@ function extractDriverApiParameters(values, direction, driver) {
   return _.fromPairs(pairs);
 }
 
+export function extractShellConnection(connection, database) {
+  const config = getCurrentConfig();
+
+  return config.allowShellConnection
+    ? {
+        ..._.omit(connection, ['_id', 'displayName', 'databases', 'connectionColor']),
+        database,
+      }
+    : {
+        _id: connection._id,
+        engine: connection.engine,
+        database,
+      };
+}
+
 async function getConnection(extensions, storageType, conid, database) {
   if (storageType == 'database' || storageType == 'query') {
     const conn = await getConnectionInfo({ conid });
     const driver = findEngineDriver(conn, extensions);
-    return [
-      {
-        ..._.omit(conn, ['_id', 'displayName']),
-        database,
-      },
-      driver,
-    ];
+    const connection = extractShellConnection(conn, database);
+    return [connection, driver];
   }
   return [null, null];
 }
@@ -201,7 +212,7 @@ export default async function createImpExpScript(extensions, values, addEditorIn
     // @ts-ignore
     script.assign(targetVar, ...getTargetExpr(extensions, sourceName, values, targetConnection, targetDriver));
 
-    const colmap = normalizeExportColumnMap(values[`columns_${sourceName}`] );
+    const colmap = normalizeExportColumnMap(values[`columns_${sourceName}`]);
 
     let colmapVar = null;
     if (colmap) {