issue_comments: 1301635906

This data as json

html_url issue_url id node_id user created_at updated_at author_association body reactions issue performed_via_github_app
https://github.com/simonw/datasette/issues/1881#issuecomment-1301635906 https://api.github.com/repos/simonw/datasette/issues/1881 1301635906 IC_kwDOBm6k_c5NlWNC 9599 2022-11-03T04:48:09Z 2022-11-03T04:48:09Z OWNER

I built this prototype on the http://127.0.0.1:8001/-/allow-debug page, which is open to anyone to visit.

But... I just realized that using this tool can leak information - you can use it to guess the names of invisible databases and tables and run theoretical permission checks against them.

Using the tool also pollutes the list of permission checks that show up on the root-anlo /-/permissions page.

So.... I'm going to restrict the usage of this tool to users with access to /-/permissions and put it on that page instead.

 
{
    "total_count": 0,
    "+1": 0,
    "-1": 0,
    "laugh": 0,
    "hooray": 0,
    "confused": 0,
    "heart": 0,
    "rocket": 0,
    "eyes": 0
}
 1434094365