Simon Willison
a528555e84
Additional actor restriction should not grant access to additional actions ( #2569 )
...
Closes #2568
2025-11-01 18:38:29 -07:00
Simon Willison
e4be95b16c
Update permissions documentation for new action system ( #2551 )
2025-10-30 17:59:54 -07:00
Simon Willison
4fe1765dc3
Add test for RST heading underline lengths, closes #2544
...
Added test_rst_heading_underlines_match_title_length() to verify that RST
heading underlines match their title lengths. The test properly handles:
- Overline+underline style headings (skips validation for those)
- Empty lines before underlines (ignores them)
- Minimum 5-character underline length (avoids false positives)
Running this test identified 14 heading underline mismatches which have
been fixed across 5 documentation files:
- docs/authentication.rst (3 headings)
- docs/plugin_hooks.rst (4 headings)
- docs/internals.rst (5 headings)
- docs/deploying.rst (1 heading)
- docs/changelog.rst (1 heading)
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-Authored-By: Claude <noreply@anthropic.com>
2025-10-26 09:49:49 -07:00
Simon Willison
c06e05b7db
New --root mechanism with datasette.root_enabled, closes #2521
2025-10-24 10:32:18 -07:00
Simon Willison
27084caa04
New allowed_resources_sql plugin hook and debug tools ( #2505 )
...
* allowed_resources_sql plugin hook and infrastructure
* New methods for checking permissions with the new system
* New /-/allowed and /-/check and /-/rules special endpoints
Still needs to be integrated more deeply into Datasette, especially for listing visible tables.
Refs: #2502
---------
Co-authored-by: Claude <noreply@anthropic.com>
2025-10-08 14:27:51 -07:00
Simon Willison
308c243cfd
datasette.set_actor_cookie() and datasette.delete_actor_cookie(), closes #1690
2025-01-15 17:37:25 -08:00
Simon Willison
63714cb2b7
Fixed some typos spotted by Gemini Pro 1.5, closes #2318
2024-04-10 17:05:15 -07:00
Simon Willison
8bfa3a51c2
Consider every plugins opinion in datasette.permission_allowed()
...
Closes #2275 , refs #2262
2024-02-16 13:29:39 -08:00
Simon Willison
900d15bcb8
alter table support for /db/-/create API, refs #2101
2024-02-08 13:36:17 -08:00
Simon Willison
bcf7ef963f
YAML/JSON examples for allow blocks
2024-01-31 19:45:05 -08:00
Alex Garcia
35deaabcb1
Move non-metadata configuration from metadata.yaml to datasette.yaml
...
* Allow and permission blocks moved to datasette.yaml
* Documentation updates, initial framework for configuration reference
2023-10-12 09:16:37 -07:00
Simon Willison
31d5c4ec05
Contraction - Google and Microsoft styleguides like it
...
I was trying out https://github.com/errata-ai/vale
2023-09-05 19:43:01 -07:00
Simon Willison
943df09dcc
Remove all remaining "$ " prefixes from docs, closes #2140
...
Also document sqlite-utils create-view
2023-08-11 10:44:34 -07:00
Simon Willison
c076fb65e0
Applied sphinx-inline-tabs to remaining examples, refs #1153
2023-07-08 11:00:08 -07:00
Simon Willison
e4ebef082d
Fixed link text
2023-01-21 07:37:29 -08:00
Simon Willison
5e672df168
Explicitly explain allow_sql: false
2023-01-09 08:25:07 -08:00
Simon Willison
fee658ad05
Improved wording in allow_sql docs
2023-01-05 09:22:49 -08:00
Simon Willison
c41278b46f
default_allow_sql setting, closes #1409
...
Refs #1410
2023-01-04 16:51:26 -08:00
Simon Willison
3bd05b854a
-e/--expires-after in create-token docs
2022-12-31 10:52:37 -08:00
Simon Willison
6e5ab9e7b3
Note in docs about new /-/create-token features, refs #1947
2022-12-13 21:07:03 -08:00
Simon Willison
2aa2adaa8b
Docs for new create-token options, refs #1855
2022-12-12 20:56:40 -08:00
Simon Willison
14f1cc4984
Update CLI reference help, refs #1855
2022-12-12 20:21:48 -08:00
Simon Willison
8bf06a76b5
register_permissions() plugin hook ( #1940 )
...
* Docs for permissions: in metadata, refs #1636
* Refactor default_permissions.py to help with implementation of #1636
* register_permissions() plugin hook, closes #1939 - also refs #1938
* Tests for register_permissions() hook, refs #1939
* Documentation for datasette.permissions, refs #1939
* permission_allowed() falls back on Permission.default, refs #1939
* Raise StartupError on duplicate permissions
* Allow dupe permisisons if exact matches
2022-12-12 18:05:54 -08:00
Simon Willison
484bef0d3b
/db/table/pk/-/update endpoint, closes #1863
2022-11-29 10:06:19 -08:00
Simon Willison
187d91d686
/db/-/create API endpoint, closes #1882
2022-11-14 21:57:28 -08:00
Simon Willison
aacf25cf19
Improvements to API token docs, refs #1852
2022-11-05 23:54:32 -07:00
Simon Willison
00632ded30
Initial attempt at /db/table/row/-/delete, refs #1864
2022-10-30 16:16:00 -07:00
Simon Willison
2865d3956f
/db/table/-/drop API, closes #1874
2022-10-30 15:17:21 -07:00
Simon Willison
51c436fed2
First draft of insert row write API, refs #1851
2022-10-26 20:57:02 -07:00
Simon Willison
c7956eed77
datasette create-token command, refs #1859
2022-10-25 21:26:12 -07:00
Simon Willison
c23fa850e7
allow_signed_tokens setting, closes #1856
2022-10-25 19:55:47 -07:00
Simon Willison
0f013ff497
Mechanism to prevent tokens creating tokens, closes #1857
2022-10-25 19:43:55 -07:00
Simon Willison
7ab091e8ef
Tests and docs for /-/create-token, refs #1852
2022-10-25 19:04:05 -07:00
Simon Willison
687907aa2b
Remove python-baseconv dependency, refs #1733 , closes #1734
2022-05-02 12:39:06 -07:00
Simon Willison
92b26673d8
Fix blacken-docs errors and warnings, refs #1718
2022-04-24 09:03:14 -07:00
Simon Willison
2208c3c68e
Spelling corrections plus CI job for codespell
...
* Use codespell to check spelling in documentation, refs #1417
* Fixed spelling errors spotted by codespell, closes #1417
* Make codespell a docs dependency
See also this TIL: https://til.simonwillison.net/python/codespell
2021-08-03 09:36:38 -07:00
Simon Willison
222f79bb4c
debug-menu permission, closes #1068
...
Also added tests for navigation menu logic.
2020-10-30 08:41:57 -07:00
Simon Willison
b8c09a9334
Suggest "allow": false instead of "allow": {}
2020-08-11 22:56:52 -07:00
Simon Willison
3c33b42132
Documenting both false and {} for "deny all" is confusing
...
Refs #906
2020-07-25 14:44:42 -07:00
Simon Willison
092874202c
Improvements to allow block logic and debug tool
...
true and false allow block values are now supported, closes #906
Added a bunch of demo links to the documentation, refs #908
2020-07-24 17:04:06 -07:00
Simon Willison
12c0bc09cc
/-/allow-debug tool, closes #908
2020-07-24 15:55:10 -07:00
Simon Willison
22d932fafc
/-/logout page for logging out of ds_actor cookie
...
Refs #840
2020-06-28 21:17:58 -07:00
Simon Willison
793a52b317
Link to datasett-auth-tokens and datasette-permissions-sql in docs, refs #806
2020-06-11 17:43:51 -07:00
Simon Willison
ce4958018e
Clarify that view-query also lets you execute writable queries
2020-06-10 17:10:28 -07:00
Simon Willison
198545733b
Document that "allow": {} denies all
...
https://github.com/simonw/datasette/issues/831#issuecomment-642324847
2020-06-10 16:56:53 -07:00
Simon Willison
57e812d5de
ds_author cookie can now expire, closes #829
...
Refs https://github.com/simonw/datasette-auth-github/issues/62#issuecomment-642152076
2020-06-10 12:39:54 -07:00
Simon Willison
b5f04f42ab
ds_actor cookie documentation, closes #826
2020-06-09 15:32:24 -07:00
Simon Willison
7633b9ab24
unauthenticated: true method plus allow block docs, closes #825
2020-06-09 10:01:03 -07:00
Simon Willison
70dd14876e
Improved documentation for permissions, refs #699
2020-06-09 09:04:46 -07:00
Simon Willison
3aa87eeaf2
Documentation no loger suggests that actor["id"] is required, closes #823
2020-06-09 07:58:12 -07:00