Commit graph

375 commits

Author SHA1 Message Date
Simon Willison
f3951539f1 Hopefully fix horizontal scroll with changelog on mobile 2020-06-09 18:19:11 -07:00
Simon Willison
d94fc39e33 Crafty JavaScript trick for generating commit references 2020-06-09 16:43:58 -07:00
Simon Willison
b3919d8059 Mostly complete release notes for 0.44, refs #806 2020-06-09 16:03:42 -07:00
Simon Willison
b5f04f42ab ds_actor cookie documentation, closes #826 2020-06-09 15:32:24 -07:00
Simon Willison
008e2f63c2 response.set_cookie(), closes #795 2020-06-09 15:19:37 -07:00
Simon Willison
f240970b83 Fixed tests/fixtures.py, closes #804 2020-06-09 12:58:12 -07:00
Simon Willison
56eb80a459 Documented CSRF protection, closes #827 2020-06-09 12:32:52 -07:00
Simon Willison
7633b9ab24 unauthenticated: true method plus allow block docs, closes #825 2020-06-09 10:01:03 -07:00
Simon Willison
70dd14876e Improved documentation for permissions, refs #699 2020-06-09 09:04:46 -07:00
Simon Willison
3aa87eeaf2 Documentation no loger suggests that actor["id"] is required, closes #823 2020-06-09 07:58:12 -07:00
Simon Willison
fa87d16612 Clearer docs for actor_matches_allow 2020-06-09 07:10:46 -07:00
Simon Willison
5a6a73e319 Replace os.urandom(32).hex() with secrets.token_hex(32) 2020-06-08 21:37:35 -07:00
Simon Willison
fac8e93815 request.url_vars property, closes #822 2020-06-08 20:40:00 -07:00
Simon Willison
db660db463 Docs + unit tests for Response, closes #821 2020-06-08 20:32:10 -07:00
Simon Willison
f5e79adf26
register_routes() plugin hook (#819)
Fixes #215
2020-06-08 20:12:06 -07:00
Simon Willison
49d6d2f7b0 allow_sql block to control execute-sql upermission in metadata.json, closes #813
Also removed the --config allow_sql:0 mechanism in favour of the new allow_sql block.
2020-06-08 17:05:44 -07:00
Simon Willison
e0a4664fba Better example plugin for permission_allowed
Also fixed it so default permission checks run after plugin permission checks, refs #818
2020-06-08 15:09:57 -07:00
Simon Willison
8205d58316 Corrected documentation for resource in view-query 2020-06-08 13:10:40 -07:00
Simon Willison
5437085382 Documentation for allow blocks on more stuff, closes #811 2020-06-08 12:32:27 -07:00
Simon Willison
c7d145e016 Updated example for extra_template_vars hook, closes #816 2020-06-08 12:06:05 -07:00
Simon Willison
799c5d5357 Renamed resource_identifier to resource, refs #817 2020-06-08 11:59:53 -07:00
Simon Willison
c9f1ec616e Removed resource_type from permissions system, closes #817
Refs #811, #699
2020-06-08 11:51:03 -07:00
Simon Willison
177059284d New request.actor property, refs #811 2020-06-08 10:05:32 -07:00
Simon Willison
613fa551a1 Removed view-row permission, for the moment - refs #811
https://github.com/simonw/datasette/issues/811#issuecomment-640338347
2020-06-07 20:14:27 -07:00
Simon Willison
5ed2853cf3 Fix permissions documenation test 2020-06-07 14:01:22 -07:00
Simon Willison
a1e801453a Renamed execute-query permission to execute-sql, refs #811 2020-06-07 13:20:59 -07:00
Simon Willison
4340845754 Nested permission checks for all views, refs #811 2020-06-07 13:03:08 -07:00
Simon Willison
86dec9e8ff Added permission check to every view, closes #808 2020-06-06 22:30:36 -07:00
Simon Willison
bd4de0647d Improved permissions documentation 2020-06-06 19:09:59 -07:00
Simon Willison
7dc23cd71a Whitespace 2020-06-06 13:05:09 -07:00
Simon Willison
f1daf64e72 Link to canned query permissions documentation 2020-06-06 12:46:40 -07:00
Simon Willison
14f6b4d200 actor_matches_allow utility function, refs #800 2020-06-06 11:39:11 -07:00
Simon Willison
d4c7b85f55 Documentation for "id": "*", refs #800 2020-06-06 11:23:54 -07:00
Simon Willison
30a8132d58 Docs for authentication + canned query permissions, refs #800
Closes #786
2020-06-06 11:18:46 -07:00
Simon Willison
0da7f49b24 Rename RequestParameters to MultiParams, refs #799 2020-06-05 10:52:50 -07:00
Simon Willison
0c064c5fe2 More things you can do with plugins 2020-06-04 20:10:40 -07:00
Simon Willison
2074efa5a4 Another actor_from_request example 2020-06-04 18:38:32 -07:00
Simon Willison
8524866fdf Link to authentication docs 2020-06-04 16:58:19 -07:00
Simon Willison
9cb44be42f Docs and tests for "params", closes #797 2020-06-03 14:04:40 -07:00
Simon Willison
aa82d03704
Basic writable canned queries
Refs #698. First working version of this feature.

* request.post_vars() no longer discards empty values
2020-06-03 08:16:50 -07:00
Simon Willison
a7137dfe06 /-/plugins now shows details of hooks, closes #794
Also added /-/plugins?all=1 parameter to see default plugins.
2020-06-02 14:49:28 -07:00
Simon Willison
4fa7cf6853 Flash messages mechanism, closes #790 2020-06-02 14:12:18 -07:00
Simon Willison
1d0bea157a New request.cookies property 2020-06-02 14:11:41 -07:00
Simon Willison
dfdbdf378a Added /-/permissions debug tool, closes #788
Also started the authentication.rst docs page, refs #786.

Part of authentication work, refs #699.
2020-05-31 22:00:36 -07:00
Simon Willison
9f3d4aba31 --root option and /-/auth-token view, refs #784 2020-05-31 18:16:42 -07:00
Simon Willison
7690d5ba40 Docs for --secret/DATASETTE_SECRET - closes #785 2020-05-31 18:16:42 -07:00
Simon Willison
fa27e44fe0 datasette.sign() and datasette.unsign() methods, refs #785 2020-05-31 18:16:42 -07:00
Simon Willison
1fc6ceefb9 Added /-/actor.json - refs #699
Also added JSON highlighting to introspection documentation.
2020-05-31 18:16:42 -07:00
Simon Willison
9315bacf6f Implemented datasette.permission_allowed(), refs #699 2020-05-31 18:16:42 -07:00
Simon Willison
461c82838d Implemented actor_from_request with tests, refs #699
Also added datasette argument to permission_allowed hook
2020-05-31 18:16:42 -07:00