mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-10-14 16:02:57 +00:00
A developer in the fork reaches the parent's kept data tables and shared ducklakes directly, so the ruleset help text, the docs and the code comment now say the rule grants arbitrary code execution, data included. "Edit in fork" shows to an allowed operator on run pages without DisableDirectDeployment, and the disabled fork entry stays hidden on CE, where its tooltip would point at the EE-only Rulesets tab. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>