From 31b5b0a062f4cdd00549944dac5e73992544fef6 Mon Sep 17 00:00:00 2001
From: Diego Imbert <diego@windmill.dev>
Date: Wed, 16 Sep 2026 14:06:44 +0200
Subject: [PATCH] fix(datatables): refuse roles while a same-workspace alias
 reaches the database

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
---
 ...8dc45020a2a553d8874c49f9eafedea5a9d40.json | 24 +++++++++++++++++++
 backend/ee-repo-ref.txt                       |  2 +-
 2 files changed, 25 insertions(+), 1 deletion(-)
 create mode 100644 backend/.sqlx/query-d48ca62c86b1af7a9dd2450c1c28dc45020a2a553d8874c49f9eafedea5a9d40.json

diff --git a/backend/.sqlx/query-d48ca62c86b1af7a9dd2450c1c28dc45020a2a553d8874c49f9eafedea5a9d40.json b/backend/.sqlx/query-d48ca62c86b1af7a9dd2450c1c28dc45020a2a553d8874c49f9eafedea5a9d40.json
new file mode 100644
index 0000000000..49875acd78
--- /dev/null
+++ b/backend/.sqlx/query-d48ca62c86b1af7a9dd2450c1c28dc45020a2a553d8874c49f9eafedea5a9d40.json
@@ -0,0 +1,24 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT dt.key AS \"datatable!\"\n           FROM workspace_settings ws\n           CROSS JOIN LATERAL jsonb_each(COALESCE(ws.datatable->'datatables', '{}'::jsonb)) dt\n           WHERE ws.workspace_id = $1\n             AND dt.key <> $2\n             AND NOT dt.value ? 'permissions'\n             AND dt.value->'database'->>'resource_type' = 'instance'\n             AND dt.value->'database'->>'resource_path' = $3\n           ORDER BY dt.key",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "datatable!",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text",
+        "Text",
+        "Text"
+      ]
+    },
+    "nullable": [
+      null
+    ]
+  },
+  "hash": "d48ca62c86b1af7a9dd2450c1c28dc45020a2a553d8874c49f9eafedea5a9d40"
+}
diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt
index ed798f6d32..1d1f24af71 100644
--- a/backend/ee-repo-ref.txt
+++ b/backend/ee-repo-ref.txt
@@ -1 +1 @@
-a1873dbb67f2302b85ff5362f8387b48eccdb607
+53614778ef0eec12ef22c6001c8905cd46f5ee17