From ce4958018ede00fbdadf0c37a99889b6901bfb9b Mon Sep 17 00:00:00 2001 From: Simon Willison Date: Wed, 10 Jun 2020 17:10:28 -0700 Subject: [PATCH] Clarify that view-query also lets you execute writable queries --- docs/authentication.rst | 2 +- docs/sql_queries.rst | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/authentication.rst b/docs/authentication.rst index 0da5a38b..6a526f34 100644 --- a/docs/authentication.rst +++ b/docs/authentication.rst @@ -461,7 +461,7 @@ Default *allow*. view-query ---------- -Actor is allowed to view a :ref:`canned query ` page, e.g. https://latest.datasette.io/fixtures/pragma_cache_size +Actor is allowed to view (and execute) a :ref:`canned query ` page, e.g. https://latest.datasette.io/fixtures/pragma_cache_size - this includes executing :ref:`canned_queries_writable`. ``resource`` - tuple: (string, string) The name of the database, then the name of the canned query diff --git a/docs/sql_queries.rst b/docs/sql_queries.rst index a73f6bc2..6cc32da1 100644 --- a/docs/sql_queries.rst +++ b/docs/sql_queries.rst @@ -223,7 +223,7 @@ Writable canned queries Canned queries by default are read-only. You can use the ``"write": true`` key to indicate that a canned query can write to the database. -See :ref:`authentication_permissions_metadata` for details on how to add permission checks to canned queries, using the ``"allow"`` key. +See :ref:`authentication_permissions_query` for details on how to add permission checks to canned queries, using the ``"allow"`` key. .. code-block:: json