Skip to content

POST to /-/insert with "replace": true should require update-row #2279

New issue
New issue
Closed
Closed
POST to /-/insert with "replace": true should require update-row#2279
Labels
authentication-and-permissionsbugjson-api
Milestone
Datasette 1.0a11
@simonw

Description

@simonw
simonw
opened on Feb 19, 2024

Currently is allowed with just insert-row permission, which is clearly wrong as a replacement acts as an update.

Metadata

Metadata

Assignees

No one assigned

    Labels

    authentication-and-permissionsbugjson-api

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions