starred/windmill
1
0
Fork 0
mirror of https://github.com/windmill-labs/windmill.git synced 2026-08-20 16:02:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: make notify_event trigger functions SECURITY DEFINER (#7826)

Browse Source 
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Ruben Fiszel
2026-02-06 07:18:38 +01:00
committed by GitHub
parent 6ea553962d
commit 33fb08cf3d
2 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/migrations/20260206060555_notify_triggers_security_definer.down.sql
+12
View File
@@ -0,0 +1,12 @@
ALTER FUNCTION notify_config_change() SECURITY INVOKER;
ALTER FUNCTION notify_global_setting_change() SECURITY INVOKER;
ALTER FUNCTION notify_global_setting_delete() SECURITY INVOKER;
ALTER FUNCTION notify_webhook_change() SECURITY INVOKER;
ALTER FUNCTION notify_workspace_envs_change() SECURITY INVOKER;
ALTER FUNCTION notify_workspace_premium_change() SECURITY INVOKER;
ALTER FUNCTION notify_team_plan_status_change() SECURITY INVOKER;
ALTER FUNCTION notify_runnable_version_change() SECURITY INVOKER;
ALTER FUNCTION notify_http_trigger_change() SECURITY INVOKER;
ALTER FUNCTION notify_token_invalidation() SECURITY INVOKER;
ALTER FUNCTION notify_workspace_key_change() SECURITY INVOKER;
ALTER FUNCTION notify_workspace_rate_limit_change() SECURITY INVOKER;
backend/migrations/20260206060555_notify_triggers_security_definer.up.sql
+18
View File
@@ -0,0 +1,18 @@
-- Make all notify_event trigger functions SECURITY DEFINER so that
-- INSERT INTO notify_event runs as the function owner (typically the
-- superuser that created the function) rather than the invoking role.
-- This prevents "permission denied for table notify_event" errors when
-- windmill_user or windmill_admin fire these triggers.
ALTER FUNCTION notify_config_change() SECURITY DEFINER;
ALTER FUNCTION notify_global_setting_change() SECURITY DEFINER;
ALTER FUNCTION notify_global_setting_delete() SECURITY DEFINER;
ALTER FUNCTION notify_webhook_change() SECURITY DEFINER;
ALTER FUNCTION notify_workspace_envs_change() SECURITY DEFINER;
ALTER FUNCTION notify_workspace_premium_change() SECURITY DEFINER;
ALTER FUNCTION notify_team_plan_status_change() SECURITY DEFINER;
ALTER FUNCTION notify_runnable_version_change() SECURITY DEFINER;
ALTER FUNCTION notify_http_trigger_change() SECURITY DEFINER;
ALTER FUNCTION notify_token_invalidation() SECURITY DEFINER;
ALTER FUNCTION notify_workspace_key_change() SECURITY DEFINER;
ALTER FUNCTION notify_workspace_rate_limit_change() SECURITY DEFINER;