Diego ImbertandClaude Opus 5 b58a036dd8 fix(datatables): nothing irreversible happens before the save that asks for it commits ...

A permissions save ran its whole plan against the data table's database before
writing the config, so an opt-out or a role removal that failed on the Windmill
side afterwards rolled the config back with the roles already gone and their
grants discarded. Only the creates and renames run there now; the drops run once
the config that no longer names them has committed, skipped if another save has
landed in between.

The rename's `group_` rewrite moves after the settings row for the same reason
the rest of it did: group deletion takes them in that order, and the two
overlapping was a deadlock.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01S5arH3G2Sa1Qqm32veJQ1n

2026-09-04 10:48:58 +02:00

..

data_metrics.rs

feat(pipelines): catalog declared measures and dimensions (#10190)

2026-07-21 07:34:44 +02:00

datatable_acl_oss.rs

fix(datatables): resolve ACL objects against the catalog, and gate on the enterprise edition

2026-09-01 11:58:58 +02:00

datatable_acl.rs

fix(datatables): every route that frees a username takes its tenants with it

2026-09-03 19:43:39 +02:00

datatable_migrations.rs

fix(datatables): close the fail-open in role resolution, and gate the ACL endpoints

2026-09-01 04:48:44 +02:00

datatable_permissions_oss.rs

fix(datatables): a role only works where it was created, and only under its own name

2026-09-03 23:59:04 +02:00

datatable_permissions.rs

fix(datatables): nothing irreversible happens before the save that asks for it commits

2026-09-04 10:48:58 +02:00

deployment_requests.rs

fix: preserve fork parent linkage on workspace id change (#9716)

2026-06-23 20:54:07 +00:00

lib.rs

fix(datatables): resolve ACL objects against the catalog, and gate on the enterprise edition

2026-09-01 11:58:58 +02:00

workspaces_extra.rs

fix(security): a WM_TOKEN job token can never be a global superadmin (GHSA-hfh4-cx4h-3fcr) (#10124)

2026-08-19 22:33:46 +02:00

workspaces_oss.rs

feat: add workspace-level service accounts (#8560)

2026-03-27 19:23:03 +00:00

workspaces.rs

Merge remote-tracking branch 'origin/main' into datatable-perms-3

2026-09-04 09:32:27 +02:00