feat(cdp): disallow hog code modification

[meikelmosby]

Problem

We hide modification of hog code for transformations in the frontend but we also want to prohibit to make modifications to hog code in the backend.

Changes

• added a validation to throw a validation error in case hog code is being modified for a transformation through the api

👉 Stay up-to-date with PostHog coding conventions for a smoother review.

Does this work well for both Cloud and self-hosted?

How did you test this code?

• added tests

[greptile-apps]

PR Summary

This PR adds a security measure to prevent modification of transformation code through the API by introducing a new HOG_TRANSFORMATIONS_ENABLED setting.

• Added validation in posthog/api/hog_function.py to block transformation code modifications when disabled
• Added new setting HOG_TRANSFORMATIONS_ENABLED = False in ee/settings.py to disable transformations by default
• Added test coverage in posthog/api/test/test_hog_function.py to verify transformation code cannot be modified while destination code changes remain allowed
• Setting is hardcoded to False without environment variable configuration, which may need consideration

_{3 file(s) reviewed, 2 comment(s)
Edit PR Review Bot Settings | Greptile}