datasette-apps 0.1a3: Permission Bug Fixes for App Creation and Edit Access
Original: datasette-apps 0.1a3
datasette-apps 0.1a3 fixes two permission bugs: unauthorized app creation and inability to delegate edit rights to non-owners.
The 0.1a3 alpha release of datasette-apps patches two access-control bugs in the Datasette plugin ecosystem. First, a bypass that let users lacking the create-app permission create apps anyway has been closed. Second, it was previously impossible to grant edit or delete rights to non-owner users; the fix aligns those permissions with the existing view model — private apps remain owner-only, while non-private apps follow Datasette's standard permission system.
datasette-apps is a plugin for Datasette, Simon Willison's widely used open-source Python tool that publishes SQLite databases as browsable, queryable web interfaces with minimal configuration. The datasette-apps extension goes a step further: it lets users build and host lightweight web applications that run directly inside a Datasette instance, reducing the need for separate infrastructure when teams want to build data-driven internal tools.
Free shows the 3-line summary; Pro unlocks the full deep summary (~300 words) so you never have to click through.
See Pro plans →Want the original English / full article?
Read on Simon Willison's Weblog →Summaries are AI-generated; the original article is authoritative.