Skip to content

/db/-/create API should require insert-rows permission to use row: or rows: option #1937

@simonw

Description

@simonw

Otherwise someone with create-table but no insert-rows permission could abuse it to insert data.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions