4 commits

Author	SHA1	Message	Date
Simon Willison	86d0e7335f	Deny unsupported write SQL operations by default ... Require view-table permission for reads discovered inside write SQL analysis, including INSERT ... SELECT and CREATE TABLE ... AS SELECT. Record additional SQLite authorizer callbacks as Operation values so unsupported functions, savepoints, virtual table DDL, and unknown callbacks are denied unless explicitly handled.	2026-05-27 14:52:52 -07:00
Simon Willison	737ff03efb	Expanded analysis of SQL operations, refs #2748	2026-05-26 22:11:35 -07:00
Simon Willison	f0b59971f7	Delete unnecessary test	2026-05-25 10:40:00 -07:00
Simon Willison	a855a1acec	Database.analyze_sql(sql) method ... Experimental, we may need this for the upcoming canned query work so that we can tell if a user should be able to save a writable canned query by confirming they have the right permissions to update the affected tables. Refs #2735	2026-05-24 22:29:49 -07:00