mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 08:01:35 +00:00
Diego ImbertandClaude Opus 5
9580e9985a
`admin` has no login to swap in — it is the data table's own connection — so the check that the data table still points where its roles live sat inside the branch that swaps credentials and never ran for it. A caller granted `admin` was handed whatever the resource pointed at, which is the case the record exists for: the guards on the resource can be gone around through a `$var:` or a concurrent enable. It runs for every permissioned data table now, whatever role the caller lands on, and only for callers with an identity — the machinery that repairs a moved data table resolves as admin and has to keep working, which is what re-saving its permissions does. The disabled schema toggle's tooltip names the specific refusal first, like the hint beside it. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S5arH3G2Sa1Qqm32veJQ1n
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise