mirror of
https://github.com/windmill-labs/windmill.git
synced 2026-09-05 16:03:47 +00:00
A linked variable owns the resource at its path: deleting one — singly or in bulk — deletes it, and renaming one moves it, so all three answer to the rule the resource endpoints do. And a data table role's tenants are stored as u/<username>, which the executor compares against the caller's name. A username rename that skipped them took the role away from the user it followed and left it waiting for whoever took the old name next. Also: the ACL endpoints stopped saying 'admins only' — a non-admin may act on what their role owns, which is the contract the handlers implement.