mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 08:01:35 +00:00
A permissions drawer on a schema row: who owns it, and what each role may do in it. Ownership moves the schema and everything already in it, and writes the default privileges that keep the owner in reach of what the other roles create later — an object belongs to whoever creates it, so that is the only way to cover what does not exist yet. Grants are built as statements — privileges, scope, role — and read back from the catalog, per object and including default privileges, so what the page shows is what the database has. Every change is confirmed against its own SQL and runs in one transaction. The editor takes a target rather than a schema: a table is the same call with one more identifier, for when the table and role sections want it.
Windmill API
The API server, exposing functionality to other components and the frontend
This crate exposes both a library as well as a binary target.