starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-10-13 00:03:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

docs: narrow the raw/h rationale comment to the missing folder ACL

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
Ruben Fiszel
2026-09-24 12:19:06 +02:00
co-authored by Claude Opus 5.5
parent 2e08490f5b
commit 2d2304bfa9
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/windmill-api-scripts/src/scripts.rs
+2 -2
View File
@@ -1418,8 +1418,8 @@ async fn create_script_internal<'c>(
if let Some(clashing_hash) = clashing_hash_o {
// Named only when the caller could already read it. The probe above has to be
// unscoped to be correct, but a hash alone reads a script's content back
// through `raw/h/{hash}`, which authorizes nothing per script — so echoing one
// the caller cannot see hands them a way to fetch it.
// through `raw/h/{hash}`, which reads through the admin pool and so applies no
// folder ACL — echoing one the caller cannot see hands them a way to fetch it.
let visible_to_caller = sqlx::query_scalar!(
"SELECT 1 FROM script WHERE hash = $1 AND workspace_id = $2",
clashing_hash,