Simon Willison
|
fba8ff6e76
|
"$env": "X" mechanism now works with nested lists, closes #837
|
2020-06-11 17:21:48 -07:00 |
Simon Willison
|
09bf3c6322
|
Documentation for publish --secret, refs #787
|
2020-06-11 09:14:30 -07:00 |
Simon Willison
|
fcc7cd6379
|
rST formatting
|
2020-06-11 09:05:15 -07:00 |
Simon Willison
|
98632f0a87
|
--secret command for datasette publish
Closes #787
|
2020-06-11 09:02:03 -07:00 |
Simon Willison
|
ce4958018e
|
Clarify that view-query also lets you execute writable queries
|
2020-06-10 17:10:28 -07:00 |
Simon Willison
|
198545733b
|
Document that "allow": {} denies all
https://github.com/simonw/datasette/issues/831#issuecomment-642324847
|
2020-06-10 16:56:53 -07:00 |
Simon Willison
|
9f236c4c00
|
Warn that register_facet_classes may change, refs #830
Also documented policy that plugin hooks should not be shipped without a real example. Refs #818
|
2020-06-10 13:06:46 -07:00 |
Simon Willison
|
57e812d5de
|
ds_author cookie can now expire, closes #829
Refs https://github.com/simonw/datasette-auth-github/issues/62#issuecomment-642152076
|
2020-06-10 12:39:54 -07:00 |
Simon Willison
|
d828abadde
|
Fix horizontal scrollbar on changelog, refs #828
|
2020-06-09 21:20:07 -07:00 |
Simon Willison
|
f3951539f1
|
Hopefully fix horizontal scroll with changelog on mobile
|
2020-06-09 18:19:11 -07:00 |
Simon Willison
|
d94fc39e33
|
Crafty JavaScript trick for generating commit references
|
2020-06-09 16:43:58 -07:00 |
Simon Willison
|
b3919d8059
|
Mostly complete release notes for 0.44, refs #806
|
2020-06-09 16:03:42 -07:00 |
Simon Willison
|
b5f04f42ab
|
ds_actor cookie documentation, closes #826
|
2020-06-09 15:32:24 -07:00 |
Simon Willison
|
008e2f63c2
|
response.set_cookie(), closes #795
|
2020-06-09 15:19:37 -07:00 |
Simon Willison
|
f240970b83
|
Fixed tests/fixtures.py, closes #804
|
2020-06-09 12:58:12 -07:00 |
Simon Willison
|
56eb80a459
|
Documented CSRF protection, closes #827
|
2020-06-09 12:32:52 -07:00 |
Simon Willison
|
7633b9ab24
|
unauthenticated: true method plus allow block docs, closes #825
|
2020-06-09 10:01:03 -07:00 |
Simon Willison
|
70dd14876e
|
Improved documentation for permissions, refs #699
|
2020-06-09 09:04:46 -07:00 |
Simon Willison
|
3aa87eeaf2
|
Documentation no loger suggests that actor["id"] is required, closes #823
|
2020-06-09 07:58:12 -07:00 |
Simon Willison
|
fa87d16612
|
Clearer docs for actor_matches_allow
|
2020-06-09 07:10:46 -07:00 |
Simon Willison
|
5a6a73e319
|
Replace os.urandom(32).hex() with secrets.token_hex(32)
|
2020-06-08 21:37:35 -07:00 |
Simon Willison
|
fac8e93815
|
request.url_vars property, closes #822
|
2020-06-08 20:40:00 -07:00 |
Simon Willison
|
db660db463
|
Docs + unit tests for Response, closes #821
|
2020-06-08 20:32:10 -07:00 |
Simon Willison
|
f5e79adf26
|
register_routes() plugin hook (#819)
Fixes #215
|
2020-06-08 20:12:06 -07:00 |
Simon Willison
|
49d6d2f7b0
|
allow_sql block to control execute-sql upermission in metadata.json, closes #813
Also removed the --config allow_sql:0 mechanism in favour of the new allow_sql block.
|
2020-06-08 17:05:44 -07:00 |
Simon Willison
|
e0a4664fba
|
Better example plugin for permission_allowed
Also fixed it so default permission checks run after plugin permission checks, refs #818
|
2020-06-08 15:09:57 -07:00 |
Simon Willison
|
8205d58316
|
Corrected documentation for resource in view-query
|
2020-06-08 13:10:40 -07:00 |
Simon Willison
|
5437085382
|
Documentation for allow blocks on more stuff, closes #811
|
2020-06-08 12:32:27 -07:00 |
Simon Willison
|
c7d145e016
|
Updated example for extra_template_vars hook, closes #816
|
2020-06-08 12:06:05 -07:00 |
Simon Willison
|
799c5d5357
|
Renamed resource_identifier to resource, refs #817
|
2020-06-08 11:59:53 -07:00 |
Simon Willison
|
c9f1ec616e
|
Removed resource_type from permissions system, closes #817
Refs #811, #699
|
2020-06-08 11:51:03 -07:00 |
Simon Willison
|
177059284d
|
New request.actor property, refs #811
|
2020-06-08 10:05:32 -07:00 |
Simon Willison
|
613fa551a1
|
Removed view-row permission, for the moment - refs #811
https://github.com/simonw/datasette/issues/811#issuecomment-640338347
|
2020-06-07 20:14:27 -07:00 |
Simon Willison
|
5ed2853cf3
|
Fix permissions documenation test
|
2020-06-07 14:01:22 -07:00 |
Simon Willison
|
a1e801453a
|
Renamed execute-query permission to execute-sql, refs #811
|
2020-06-07 13:20:59 -07:00 |
Simon Willison
|
4340845754
|
Nested permission checks for all views, refs #811
|
2020-06-07 13:03:08 -07:00 |
Simon Willison
|
86dec9e8ff
|
Added permission check to every view, closes #808
|
2020-06-06 22:30:36 -07:00 |
Simon Willison
|
bd4de0647d
|
Improved permissions documentation
|
2020-06-06 19:09:59 -07:00 |
Simon Willison
|
7dc23cd71a
|
Whitespace
|
2020-06-06 13:05:09 -07:00 |
Simon Willison
|
f1daf64e72
|
Link to canned query permissions documentation
|
2020-06-06 12:46:40 -07:00 |
Simon Willison
|
14f6b4d200
|
actor_matches_allow utility function, refs #800
|
2020-06-06 11:39:11 -07:00 |
Simon Willison
|
d4c7b85f55
|
Documentation for "id": "*", refs #800
|
2020-06-06 11:23:54 -07:00 |
Simon Willison
|
30a8132d58
|
Docs for authentication + canned query permissions, refs #800
Closes #786
|
2020-06-06 11:18:46 -07:00 |
Simon Willison
|
0da7f49b24
|
Rename RequestParameters to MultiParams, refs #799
|
2020-06-05 10:52:50 -07:00 |
Simon Willison
|
0c064c5fe2
|
More things you can do with plugins
|
2020-06-04 20:10:40 -07:00 |
Simon Willison
|
2074efa5a4
|
Another actor_from_request example
|
2020-06-04 18:38:32 -07:00 |
Simon Willison
|
8524866fdf
|
Link to authentication docs
|
2020-06-04 16:58:19 -07:00 |
Simon Willison
|
9cb44be42f
|
Docs and tests for "params", closes #797
|
2020-06-03 14:04:40 -07:00 |
Simon Willison
|
aa82d03704
|
Basic writable canned queries
Refs #698. First working version of this feature.
* request.post_vars() no longer discards empty values
|
2020-06-03 08:16:50 -07:00 |
Simon Willison
|
a7137dfe06
|
/-/plugins now shows details of hooks, closes #794
Also added /-/plugins?all=1 parameter to see default plugins.
|
2020-06-02 14:49:28 -07:00 |