mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 00:02:13 +00:00
Diego Imbert
fa4c06658f
A revoke's objects came from the request, argument types included, and those go into the statement unquoted — so a schema owner could close a routine signature and append SQL that ran as the data table's administrative login. The request now only names an object: what reaches the statement is read back from the catalog, and an object that resolves to nothing is refused. The planners were behind `private`, which community builds carry, so the permissions API answered on a CE binary. They take `enterprise` as well, with a test that pins the refusal in every other edition. Default privileges are read back scoped to one data table's own roles: two data tables can share a database, and a new role of one was inheriting the other's rules.
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise