Skip to content

Database download should implement cascading permissions #1058

New issue
New issue
Closed
Closed
Database download should implement cascading permissions#1058
Labels
authentication-and-permissionssmall
Milestone
0.51
@simonw

Description

@simonw
simonw
opened on Oct 27, 2020

datasette/datasette/views/database.py

Lines 130 to 136 in 5a15197

class DatabaseDownload(DataView):
name = "database_download"
async def view_get(self, request, database, hash, correct_hash_present, **kwargs):
await self.check_permission(request, "view-instance")
await self.check_permission(request, "view-database", database)
await self.check_permission(request, "view-database-download", database)

Should be updated for #832 cascading permissions. Example commit: d6e03b0

Metadata

Metadata

Assignees

No one assigned

    Labels

    authentication-and-permissionssmall

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions