[CT-2937] [Feature] Optional config / flag to disallow paths outside current working directory

[jtcohen6]

Is this your first time submitting a feature request?

• I have read the expectations for open source contributors
• I have searched the existing issues, and I could not find an existing issue for this feature
• I am requesting a straightforward extension of existing dbt functionality, rather than a Big Idea better suited to a discussion

Describe the feature

Prevent dbt-core from deleting/overwriting files outside the relative project directory. For example:

clean-targets: ["../.."]

This is most relevant for clean-targets (where dbt deletes files), but I think we would also want to prevent it for target-paths (where dbt overwrites files).

We could either:

• raise an error during project config resolution (user-friendlier, my preference)
• silently ignore any paths outside the relative directory

Describe alternatives you've considered

Not making this configurable behavior, but simply disallowing it for everyone always. I can't think of a legitimate use case for doing this, but you never know

Who will this benefit?

• Safely deploying dbt-core in dbt Cloud / runtime environments
• Anyone who accidentally fat-fingers an extra / into their clean-targets, and doesn't like the idea of rimraffing their file system

Are you interested in contributing this feature?

No response

Anything else?

Jira ticket for context: https://dbtlabs.atlassian.net/browse/CLI-118

[graciegoheen]

From estimation meeting: mostly a concern for writing and deleting

[graciegoheen]

From estimation meeting: probably best to throw an error instead of failing silently