remote/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2026-09-21 16:04:07 +02:00
Code Issues Projects Releases Packages Wiki Activity

Check effective table visibility for through filters

Browse source
This commit is contained in:
Simon Willison 2026-09-10 16:10:18 -07:00
commit 375f9f0322
1 changed files with 8 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

8
datasette/filters.py
View file

@ -133,6 +133,14 @@ def through_filters(request, database, table, datasette):
through_table = through_data["table"]
other_column = through_data["column"]
value = through_data["value"]
await datasette.ensure_permissions(
request.actor,
[
("view-table", (database, through_table)),
("view-database", database),
"view-instance",
],
)
db = datasette.get_database(database)
outgoing_foreign_keys = await db.foreign_keys_for_table(through_table)
try: