mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-11 00:06:06 +00:00
A fork's data table points either at the database of the workspace it was forked from — where roles created here hold grants that workspace's own config does not name, so its next save adopts or destroys them — or at a clone whose whole database the fork can drop, taking the roles with it. Neither is a place to build an access model, so the save and the preview refuse it. Turning them off stays allowed, or a fork carrying permissions from before this rule could never be rid of them and the roles behind them never dropped. The drawer says why, and the toggle is off only where it would be refused. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S5arH3G2Sa1Qqm32veJQ1n