github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity

Nested permission checks for all views, refs #811

Browse source
This commit is contained in:
Simon Willison 2020-06-07 13:03:08 -07:00
commit 4340845754
6 changed files with 97 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

2
datasette/views/index.py
View file

@ -22,7 +22,7 @@ class IndexView(BaseView):
self.ds = datasette
async def get(self, request, as_format):
await self.check_permission(request, "view-index")
await self.check_permission(request, "view-instance")
databases = []
for name, db in self.ds.databases.items():
table_names = await db.table_names()