3 commits

Author	SHA1	Message	Date
Simon Willison	65c427e4ee	Ensure :actor, :actor_id and :action are all available to permissions SQL, closes #2520 ... - Updated build_rules_union() to accept actor as dict and provide :actor (JSON) and :actor_id - Updated resolve_permissions_from_catalog() and resolve_permissions_with_candidates() to accept actor dict - :actor is now the full actor dict as JSON (use json_extract() to access fields) - :actor_id is the actor's id field for simple comparisons - :action continues to be available as before - Updated all call sites and tests to use new parameter format - Added test demonstrating all three parameters working together	2025-10-24 10:32:18 -07:00
Simon Willison	b9c6e7a0f6	PluginSQL renamed to PermissionSQL, closes #2524	2025-10-24 10:32:18 -07:00
Simon Willison	27084caa04	New allowed_resources_sql plugin hook and debug tools (#2505) ... * allowed_resources_sql plugin hook and infrastructure * New methods for checking permissions with the new system * New /-/allowed and /-/check and /-/rules special endpoints Still needs to be integrated more deeply into Datasette, especially for listing visible tables. Refs: #2502 --------- Co-authored-by: Claude <noreply@anthropic.com>	2025-10-08 14:27:51 -07:00