klinsmaya/SQLBot
1
0
Fork 0
mirror of https://gh-proxy.org/https://github.com/klinsmaya/SQLBot.git synced 2026-11-08 01:06:59 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: Fix the vulnerability in viewing enumeration values across workspaces

Browse Source
This commit is contained in:
junjun
2026-06-17 17:13:50 +08:00
committed by Junjun
parent a76f8e7f9b
commit df44e660bd
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/apps/datasource/api/datasource.py
+3 -2
View File
@@ -243,8 +243,9 @@ async def preview_data(session: SessionDep, trans: Trans, current_user: CurrentU
# not used
@router.post("/fieldEnum/{id}", include_in_schema=False)
async def field_enum(session: SessionDep, id: int):
@router.post("/fieldEnum/{ds_id}/{id}", include_in_schema=False)
@require_permissions(permission=SqlbotPermission(type='ds', keyExpression="ds_id"))
async def field_enum(session: SessionDep, ds_id: int, id: int):
def inner():
return fieldEnum(session, id)