mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-05 16:03:47 +00:00
Diego Imbert
c289a40e5b
`get_public_settings` is the one the logged-in layout calls for every user, and it served the data table config as stored — generated role logins included. A member who is a tenant of no role could read every role's password and connect as it directly, which is the whole tenant model. It goes through the same redaction as the admin settings and the tarball now. Also, on the way there: - The permissions drawer opened from a data table's row sent the role the manager is connected as, which belongs to another data table: roles are per data table, so a row under another one is read as its own default role. - The grant repair on an instance database ran before `apply_datatable_acl` authorized anything, so any member could drive that privileged connection with a request about to be refused. - That repair also assumed schema `public` exists, and failed whole where it had been dropped.
Windmill frontend
The Windmill frontend written in Svelte 5 + Tailwind CSS
The frontend is under AGPL, see the LICENSE file at the root of this repo