github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity

Implemented view-instance permission, refs #811

Browse source
This commit is contained in:
Simon Willison 2020-06-07 14:30:39 -07:00
commit 8571ce388a
2 changed files with 24 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
datasette/default_permissions.py
View file

@ -7,6 +7,10 @@ def permission_allowed(datasette, actor, action, resource_type, resource_identif
if action == "permissions-debug":
if actor and actor.get("id") == "root":
return True
elif action == "view-instance":
allow = datasette.metadata("allow")
if allow is not None:
return actor_matches_allow(actor, allow)
elif action == "view-query":
# Check if this query has a "allow" block in metadata
assert resource_type == "query"