The 0.1a3 alpha release of datasette-apps patches two access-control bugs in the Datasette plugin ecosystem. First, a bypass that let users lacking the create-app permission create apps anyway has been closed. Second, it was previously impossible to grant edit or delete rights to non-owner users; the fix aligns those permissions with the existing view model — private apps remain owner-only, while non-private apps follow Datasette's standard permission system.
The Datasette plugin `datasette-llm`, maintained by well-known open-source developer Simon Willison, has released version 0.1a8 today. Datasette is an…