* `callback` {Function|null} The authorizer function to set, or `null` to

clear the current authorizer.

Sets an authorizer callback that SQLite will invoke whenever it attempts to

access data or modify the database schema through prepared statements.

This can be used to implement security policies, audit access, or restrict certain operations.

This method is a wrapper around [`sqlite3_set_authorizer()`][].

When invoked, the callback receives five arguments:

* `actionCode` {number} The type of operation being performed (e.g.,

`SQLITE_INSERT`, `SQLITE_UPDATE`, `SQLITE_SELECT`).

* `arg1` {string|null} The first argument (context-dependent, often a table name).

* `arg2` {string|null} The second argument (context-dependent, often a column name).

* `dbName` {string|null} The name of the database.

* `triggerOrView` {string|null} The name of the trigger or view causing the access.

The callback must return one of the following constants:

* `SQLITE_OK` - Allow the operation.

* `SQLITE_DENY` - Deny the operation (causes an error).

* `SQLITE_IGNORE` - Ignore the operation (silently skip).

const { DatabaseSync, constants } = require('node:sqlite');

const db = new DatabaseSync(':memory:');

db.setAuthorizer((actionCode) => {

if (actionCode === constants.SQLITE_CREATE_TABLE) {

return constants.SQLITE_DENY;

}

return constants.SQLITE_OK;

});

db.prepare('SELECT 1').get();

try {

db.exec('CREATE TABLE blocked (id INTEGER)');

} catch (err) {

console.log('Operation blocked:', err.message);

}

import { DatabaseSync, constants } from 'node:sqlite';

const db = new DatabaseSync(':memory:');

db.setAuthorizer((actionCode) => {

if (actionCode === constants.SQLITE_CREATE_TABLE) {

return constants.SQLITE_DENY;

}

return constants.SQLITE_OK;

});

db.prepare('SELECT 1').get();

try {

db.exec('CREATE TABLE blocked (id INTEGER)');

} catch (err) {

console.log('Operation blocked:', err.message);

}

The following constants are used with the [`database.setAuthorizer()`][] method.

One of the following constants must be returned from the authorizer callback

function passed to [`database.setAuthorizer()`][].

<table>

<tr>

<th>Constant</th>

<th>Description</th>

</tr>

<tr>

<td><code>SQLITE_OK</code></td>

<td>Allow the operation to proceed normally.</td>

</tr>

<tr>

<td><code>SQLITE_DENY</code></td>

<td>Deny the operation and cause an error to be returned.</td>

</tr>

<tr>

<td><code>SQLITE_IGNORE</code></td>

<td>Ignore the operation and continue as if it had never been requested.</td>

</tr>

</table>

The following constants are passed as the first argument to the authorizer

callback function to indicate what type of operation is being authorized.

<table>

<tr>

<th>Constant</th>

<th>Description</th>

</tr>

<tr>

<td><code>SQLITE_CREATE_INDEX</code></td>

<td>Create an index</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_TABLE</code></td>

<td>Create a table</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_TEMP_INDEX</code></td>

<td>Create a temporary index</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_TEMP_TABLE</code></td>

<td>Create a temporary table</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_TEMP_TRIGGER</code></td>

<td>Create a temporary trigger</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_TEMP_VIEW</code></td>

<td>Create a temporary view</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_TRIGGER</code></td>

<td>Create a trigger</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_VIEW</code></td>

<td>Create a view</td>

</tr>

<tr>

<td><code>SQLITE_DELETE</code></td>

<td>Delete from a table</td>

</tr>

<tr>

<td><code>SQLITE_DROP_INDEX</code></td>

<td>Drop an index</td>

</tr>

<tr>

<td><code>SQLITE_DROP_TABLE</code></td>

<td>Drop a table</td>

</tr>

<tr>

<td><code>SQLITE_DROP_TEMP_INDEX</code></td>

<td>Drop a temporary index</td>

</tr>

<tr>

<td><code>SQLITE_DROP_TEMP_TABLE</code></td>

<td>Drop a temporary table</td>

</tr>

<tr>

<td><code>SQLITE_DROP_TEMP_TRIGGER</code></td>

<td>Drop a temporary trigger</td>

</tr>

<tr>

<td><code>SQLITE_DROP_TEMP_VIEW</code></td>

<td>Drop a temporary view</td>

</tr>

<tr>

<td><code>SQLITE_DROP_TRIGGER</code></td>

<td>Drop a trigger</td>

</tr>

<tr>

<td><code>SQLITE_DROP_VIEW</code></td>

<td>Drop a view</td>

</tr>

<tr>

<td><code>SQLITE_INSERT</code></td>

<td>Insert into a table</td>

</tr>

<tr>

<td><code>SQLITE_PRAGMA</code></td>

<td>Execute a PRAGMA statement</td>

</tr>

<tr>

<td><code>SQLITE_READ</code></td>

<td>Read from a table</td>

</tr>

<tr>

<td><code>SQLITE_SELECT</code></td>

<td>Execute a SELECT statement</td>

</tr>

<tr>

<td><code>SQLITE_TRANSACTION</code></td>

<td>Begin, commit, or rollback a transaction</td>

</tr>

<tr>

<td><code>SQLITE_UPDATE</code></td>

<td>Update a table</td>

</tr>

<tr>

<td><code>SQLITE_ATTACH</code></td>

<td>Attach a database</td>

</tr>

<tr>

<td><code>SQLITE_DETACH</code></td>

<td>Detach a database</td>

</tr>

<tr>

<td><code>SQLITE_ALTER_TABLE</code></td>

<td>Alter a table</td>

</tr>

<tr>

<td><code>SQLITE_REINDEX</code></td>

<td>Reindex</td>

</tr>

<tr>

<td><code>SQLITE_ANALYZE</code></td>

<td>Analyze the database</td>

</tr>

<tr>

<td><code>SQLITE_CREATE_VTABLE</code></td>

<td>Create a virtual table</td>

</tr>

<tr>

<td><code>SQLITE_DROP_VTABLE</code></td>

<td>Drop a virtual table</td>

</tr>

<tr>

<td><code>SQLITE_FUNCTION</code></td>

<td>Use a function</td>

</tr>

<tr>

<td><code>SQLITE_SAVEPOINT</code></td>

<td>Create, release, or rollback a savepoint</td>

</tr>

<tr>

<td><code>SQLITE_COPY</code></td>

<td>Copy data (legacy)</td>

</tr>

<tr>

<td><code>SQLITE_RECURSIVE</code></td>

<td>Recursive query</td>

</tr>

</table>

[`database.setAuthorizer()`]: #databasesetauthorizercallback

[`sqlite3_set_authorizer()`]: https://sqlite.org/c3ref/set_authorizer.html