remote/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2026-09-28 04:44:21 +02:00
Code Issues Projects Releases Packages Wiki Activity

Limit derived-table permissions to one source hop

Browse source 
Simplify the solution to 5de0c1724e - avoid contextvar.
This commit is contained in:
Simon Willison 2026-09-10 15:46:12 -07:00
commit 92c7d4b608
9 changed files with 235 additions and 64 deletions
Download patch file Download diff file Expand all files Collapse all files

9
docs/authentication.rst
View file

@ -1382,10 +1382,11 @@ view-table
Actor is allowed to view a table (or view) page, e.g. https://latest.datasette.io/fixtures/complex_foreign_keys
FTS vocabulary tables (``fts5vocab`` and ``fts4aux``) also require access to
their source FTS table and, for an external-content index, its content table.
The vocabulary table's own permission rules still apply. Vocabulary tables
whose source cannot be resolved within the same SQLite schema are denied.
Derived implementation tables require access to their immediate source: FTS and RTree shadow tables require access to their virtual table, external-content FTS tables require access to their content table, and FTS vocabulary tables (``fts5vocab`` and ``fts4aux``) require access to their FTS table. The derived table's own permission rules also apply.
Access is always denied if the source table is itself derived, or if a vocabulary table's source cannot be identified.
The same rules apply to individual permission checks and table listings, including whether they are private. If a database error prevents dependency discovery, the check or listing fails with an error instead of ignoring the dependencies. Failed discovery results are not cached, so later checks can retry.
``resource`` - ``datasette.resources.TableResource(database, table)``
``database`` is the name of the database (string)