Diego ImbertandClaude Opus 5 baba5e19ee fix(datatables): no entry without roles may newly reach a database under roles ...

The previous guard only caught a new name replacing an entry under roles.
A whole-map save could also repoint an existing entry without roles at
that database, or another workspace could point one there, and every
caller of that entry would connect as admin. The rule is now stated on
the saved entries: one that carries no roles and newly points at an
instance database any entry under roles uses, in this workspace or
another, is refused. A declared rename carries its roles and passes.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BjfMkJyKzodxkobqGZ6Lqb

2026-09-14 21:36:50 +02:00

..

fixtures

refactor(datatables): put the role catalog in its own table, not in global_settings

2026-09-08 16:29:51 +02:00

ai_routes.rs

fix(ai): enforce RLS and scope check on user-supplied X-Resource-Path (#9276)

2026-05-21 15:21:27 +00:00

apps.rs

feat: make createApp and updateApp the full-code app tools over MCP (#10510)

2026-08-04 18:20:48 +02:00

assets.rs

fix: show runtime-detected assets in a run's Assets tab (#10738)

2026-08-18 10:26:20 +02:00

audit.rs

fix: make on_behalf_of control permissions for scripts and flows (#10438)

2026-08-01 20:37:21 +02:00

capture_unauthed.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

ci_tests.rs

feat: WM_TESTED_RUNNABLE env var + wildcards in test: annotation (#8926)

2026-04-24 12:52:25 +00:00

concurrency_groups.rs

authorize GET /concurrency_groups/{job_id}/key per job (#10665)

2026-08-12 21:05:02 +02:00

configs.rs

fix: move alert config from config table to global_settings (#8762)

2026-04-08 15:54:44 +00:00

datatable_roles.rs

fix(datatables): no entry without roles may newly reach a database under roles

2026-09-14 21:36:50 +02:00

dbt_materialize_target.rs

feat: let // materialize declare a dbt:// warehouse-relation write (#10978)

2026-09-07 17:38:07 +02:00

drafts.rs

feat: Db-backed user drafts (#9351)

2026-06-15 10:23:16 +02:00

favorites.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

flows.rs

feat: Db-backed user drafts (#9351)

2026-06-15 10:23:16 +02:00

folder_history.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

folders.rs

refactor: move integration tests to subcrates to reduce recompilation

2026-02-11 14:04:54 +00:00

fork_clone_on_behalf_of.rs

fix: scope a fork's cloned app policy and custom path to its creator (#10595)

2026-08-10 22:59:21 +02:00

fork_member_grant.rs

feat(forks): let a fork's creator manage developers on it without being an admin (#10166)

2026-07-17 15:13:36 +02:00

fork_secret_replication_azure.rs

fix: replicate all secrets on fork when external backend is configured (#10060)

2026-07-12 10:19:20 +02:00

granular_acls.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

group_history.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

groups.rs

fix(groups): replace instance-group delta-patching with a state-based reconciler (#10686)

2026-08-14 18:43:01 +02:00

health.rs

test nits

2026-03-27 12:28:54 +00:00

inputs.rs

fix: show scheduled singlestepflow runs in flow history sidebar (#10312)

2026-07-24 18:12:09 +02:00

job_metrics.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

jobs_authed.rs

report the EE gate instead of a 500 on restart flow at step (#10846)

2026-08-26 00:31:21 +02:00

jobs_unauthed.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

mcp_preprocessor_headers.rs

test: keep the mcp preprocessor header test off the dependency job (#10989)

2026-09-05 11:10:41 +02:00

mcp_protocol_versions.rs

feat(mcp): serve the 2026-07-28 spec alongside the legacy protocol (#10535)

2026-08-05 13:52:09 +02:00

native_triggers.rs

fix: make the native trigger disable/enable toggle actually save (#11024)

2026-09-08 17:07:26 +02:00

nested_dev_workspace.rs

feat: offer more dev workspace environment labels (#10570)

2026-08-06 18:32:19 +00:00

npm_proxy.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

offboarding.rs

refactor: make the app policy's principal the authority for its identity (#10440)

2026-09-12 09:10:15 +02:00

permissions.rs

feat: store hashed tokens instead of plaintext (#8217)

2026-03-17 01:15:38 +00:00

protection_rules.rs

fix: let a draft-only schedule, trigger or resource be deleted (#11010)

2026-09-07 18:55:40 +02:00

raw_apps.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

resources.rs

perf: cap resource content sent to the search modal (#10714)

2026-08-16 17:06:07 +02:00

run_inline.rs

feat: mcp oauth gateway (#8443)

2026-03-20 16:12:59 +00:00

schedules.rs

fix: let a draft-only schedule, trigger or resource be deleted (#11010)

2026-09-07 18:55:40 +02:00

scripts.rs

fix: record supplied script lock hashes so importers can skip relocking (#10915)

2026-09-02 19:20:49 +02:00

sensitive_log_masking.rs

feat: support assigning a worker tag to app inline scripts (#9002)

2026-05-01 17:21:17 +00:00

service_logs.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

settings.rs

fix: move alert config from config table to global_settings (#8762)

2026-04-08 15:54:44 +00:00

slack_approvals_unauthed.rs

fix: authenticate slack callback payload with per-workspace hmac (#9461)

2026-06-06 08:02:20 +00:00

token_hash.rs

fix: keep native triggers attached when a runnable is renamed (#10432)

2026-07-31 23:44:25 +02:00

token_label_idor.rs

fix: credit the token owner instead of the token label in the audit trail (#10423)

2026-07-31 11:21:14 +02:00

trash.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

trigger_e2e.rs

fix: advance postgres replication slot lsn via periodic standby status updates (#9227)

2026-05-19 05:44:13 +00:00

triggers.rs

feat: support application default credentials for gcp pub/sub triggers (#10778)

2026-08-21 10:41:14 +02:00

users.rs

fix: let a principal without a login account own a draft (#10925)

2026-09-01 23:42:08 +02:00

variables.rs

fix(security): scope variable and resource value caches by caller identity (#9427)

2026-06-03 10:31:45 +00:00

workspace_comparison.rs

feat(fork): merge a fork deletion on evidence, not on the counters (#10484)

2026-08-04 00:50:27 +02:00

workspace_dependencies_git_sync.rs

fix: scope git-sync concurrency key per repository (#10767)

2026-08-19 21:25:02 +02:00

workspace_deps.rs

chore: upgrade axum 0.7 to 0.8 (#8539)

2026-03-27 09:55:04 +00:00

workspace_encryption_key_git_sync.rs

fix: batch encryption-key rotation into one git-sync job (#9355)

2026-05-29 05:12:35 +00:00

workspaces.rs

feat: workspace setting to hide the AI assistant, agent steps unaffected (#10941)

2026-09-02 17:21:10 +02:00