mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 08:01:35 +00:00
Diego Imbert
45d5eeda0e
A role with a stored pg_rolename but no password resolved to the data table's own connection, which owns everything — so a caller authorized as one role got the admin one instead. Exports and git-synced settings redact that password, so a restored config is exactly the shape that produced it. Refuse instead, and name the fix. The ACL endpoints took any workspace member: on a data table without roles every member resolves to that same admin connection, so ownership and grants there are the workspace admins' to change, as the roles themselves are. Also: check a migration batch's roles before applying any of it, keep the role picker for a single non-default role, drop the revoke button from a default privilege on types (which no scope can express), and say what get_datatable_resource_as_default_role actually resolves as.
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise