mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 16:02:23 +00:00
Diego Imbert
fa4c06658f
A revoke's objects came from the request, argument types included, and those go into the statement unquoted — so a schema owner could close a routine signature and append SQL that ran as the data table's administrative login. The request now only names an object: what reaches the statement is read back from the catalog, and an object that resolves to nothing is refused. The planners were behind `private`, which community builds carry, so the permissions API answered on a CE binary. They take `enterprise` as well, with a test that pins the refusal in every other edition. Default privileges are read back scoped to one data table's own roles: two data tables can share a database, and a new role of one was inheriting the other's rules.
20 lines
628 B
Rust
20 lines
628 B
Rust
pub mod data_metrics;
|
|
pub mod datatable_acl;
|
|
pub mod datatable_acl_oss;
|
|
pub mod datatable_migrations;
|
|
pub mod datatable_permissions;
|
|
pub mod datatable_permissions_oss;
|
|
pub mod deployment_requests;
|
|
pub mod workspaces;
|
|
pub mod workspaces_extra;
|
|
pub mod workspaces_oss;
|
|
|
|
// Community builds carry `private`, so the data table planners take the
|
|
// enterprise feature too: what they plan is enterprise-only.
|
|
#[cfg(all(feature = "private", feature = "enterprise"))]
|
|
pub mod datatable_acl_ee;
|
|
#[cfg(all(feature = "private", feature = "enterprise"))]
|
|
pub mod datatable_permissions_ee;
|
|
#[cfg(feature = "private")]
|
|
pub mod workspaces_ee;
|