mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-08 16:03:27 +00:00
Diego ImbertandClaude Opus 5
c6c26fbd92
A clone lands in a brand-new database where none of the roles exist, and the fork's copy of the config is stripped of its permissions — so every member of the fork, including one whose role reached two tables, resolved to the copy's own owner connection and read the whole thing. The fork also inherits every member of the parent, so it took one admin clicking "clone schema and data". Refused at the two clone endpoints and at the fork wiring itself, which is the one a caller cannot go around. A plain database-to-database import is untouched: it lands nowhere that strips permissions. Sharing the original is the supported answer, and carrying the parent's restrictions into a shared data table is the next commit. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S5arH3G2Sa1Qqm32veJQ1n
Windmill Backend
This folder holds all backend components, the src/ folder only contains files used to build the "root" binary.
Components
| name | description |
|---|---|
| windmill-api | The API server, exposing functionality to other components and the frontend |
| windmill-audit | Contains audit functionality, allowing different components to record important actions |
| windmill-common | Common code shared by all crates |
| windmill-queue | Contains job & flow queuing functionality, commonly written to by the API server and read from by workers |
| windmill-worker | The worker. Used to process and execute flows & jobs. |
| parsers | Contains code to parse signatures in different langauges. |
Compile sqlx for offline ci
cargo sqlx prepare --workspace -- --bin windmill --features enterprise