mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-06 08:01:35 +00:00
Functions live in pg_proc, so a schema changing hands left them behind and a grant on ALL FUNCTIONS disappeared from the drawer on the next read, with no way to revoke it. Read them alongside pg_class, and name them by their identity arguments, which is what tells two of one name apart. ALTER DEFAULT PRIVILEGES binds only the roles it names, so a role created after a 'created later' grant produced tables no one else could read. Replay the rules already in force for each new role.
Windmill API
The API server, exposing functionality to other components and the frontend
This crate exposes both a library as well as a binary target.