From 676bb64c877d73f8ff496cef4632f5a8a5a9283c Mon Sep 17 00:00:00 2001 From: Simon Willison Date: Tue, 30 Jun 2020 21:25:35 -0700 Subject: [PATCH] Release 0.45a5 Refs #840, #832, #835, #812 --- docs/changelog.rst | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/docs/changelog.rst b/docs/changelog.rst index 96a53c52..adfd7c5a 100644 --- a/docs/changelog.rst +++ b/docs/changelog.rst @@ -4,9 +4,9 @@ Changelog ========= -.. _v0_45a4: +.. _v0_45a5: -0.45a4 (2020-06-28) +0.45a5 (2020-06-30) ------------------- .. warning:: This is an **alpha** release. See :ref:`contributing_alpha_beta`. @@ -19,6 +19,10 @@ Changelog (:_actor_id, :_now_datetime_utc) This inserts the currently authenticated actor ID and the current datetime. (`#842 `__) +- New ``/-/logout`` page, linked to from the navigation if you are logged in with a ``ds_actor`` cookie. (`#840 `__) +- Cascading view permissons - so if a user has ``view-table`` they can view the table page even if they do not have ``view-database`` or ``view-instance``. (`#832 `__) +- CSRF protection no longer applies to ``Authentication: Bearer token`` requests or requests without cookies. (`#835 `__) +- New :ref:`plugin_hook_forbidden` plugin hook for customizing how Datasette responds to a 403 forbidden error. (`#812 `__) - New :ref:`plugin_hook_register_magic_parameters` plugin hook. - New :ref:`plugin_hook_startup` plugin hook. (`#834 `__) - New :ref:`plugin_hook_canned_queries` plugin hook. See `datasette-saved-queries `__ for an example of this hook in action. (`#852 `__)