mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-11 00:06:06 +00:00
Functions live in pg_proc, so a schema changing hands left them behind and a grant on ALL FUNCTIONS disappeared from the drawer on the next read, with no way to revoke it. Read them alongside pg_class, and name them by their identity arguments, which is what tells two of one name apart. ALTER DEFAULT PRIVILEGES binds only the roles it names, so a role created after a 'created later' grant produced tables no one else could read. Replay the rules already in force for each new role.
Windmill frontend
The Windmill frontend written in Svelte 5 + Tailwind CSS
The frontend is under AGPL, see the LICENSE file at the root of this repo