From 87aa7981481e74b9c5aa8e87d0903b2ef4d5f41d Mon Sep 17 00:00:00 2001
From: Simon Willison <swillison@gmail.com>
Date: Thu, 30 Oct 2025 17:54:07 -0700
Subject: [PATCH] Permission tabs include allow debug page

Closes #2559
---
 datasette/templates/_permissions_debug_tabs.html | 1 +
 datasette/templates/allow_debug.html             | 3 +++
 datasette/views/special.py                       | 3 +++
 3 files changed, 7 insertions(+)

diff --git a/datasette/templates/_permissions_debug_tabs.html b/datasette/templates/_permissions_debug_tabs.html
index ab8be1fb..d7203c1e 100644
--- a/datasette/templates/_permissions_debug_tabs.html
+++ b/datasette/templates/_permissions_debug_tabs.html
@@ -49,5 +49,6 @@
     <a href="{{ urls.path('-/allowed') }}{{ query_string }}" {% if current_tab == "allowed" %}class="active"{% endif %}>Allowed</a>
     <a href="{{ urls.path('-/rules') }}{{ query_string }}" {% if current_tab == "rules" %}class="active"{% endif %}>Rules</a>
     <a href="{{ urls.path('-/actions') }}" {% if current_tab == "actions" %}class="active"{% endif %}>Actions</a>
+    <a href="{{ urls.path('-/allow-debug') }}" {% if current_tab == "allow_debug" %}class="active"{% endif %}>Allow debug</a>
 </nav>
 {% endif %}
diff --git a/datasette/templates/allow_debug.html b/datasette/templates/allow_debug.html
index 610417d2..1ecc92df 100644
--- a/datasette/templates/allow_debug.html
+++ b/datasette/templates/allow_debug.html
@@ -33,6 +33,9 @@ p.message-warning {
 
 <h1>Debug allow rules</h1>
 
+{% set current_tab = "allow_debug" %}
+{% include "_permissions_debug_tabs.html" %}
+
 <p>Use this tool to try out different actor and allow combinations. See <a href="https://docs.datasette.io/en/stable/authentication.html#defining-permissions-with-allow-blocks">Defining permissions with "allow" blocks</a> for documentation.</p>
 
 <form class="core" action="{{ urls.path('-/allow-debug') }}" method="get" style="margin-bottom: 1em">
diff --git a/datasette/views/special.py b/datasette/views/special.py
index 51af335f..60e4b992 100644
--- a/datasette/views/special.py
+++ b/datasette/views/special.py
@@ -600,6 +600,9 @@ class AllowDebugView(BaseView):
                 "error": "\n\n".join(errors) if errors else "",
                 "actor_input": actor_input,
                 "allow_input": allow_input,
+                "has_debug_permission": await self.ds.allowed(
+                    action="permissions-debug", actor=request.actor
+                ),
             },
         )