Skip to content
TopicTracker
From simonwillison.netView original ↗
TranslationTranslation

datasette-apps 0.1a3

Datasette-apps 0.1a3 fixes two security bugs: a permission bypass where users without the create-app permission could still create apps, and a restriction that made it impossible to grant edit/delete permissions to non-owners for private apps.

Background

- Datasette is an open-source tool by Simon Willison for exploring and publishing tabular data (CSV, SQLite, etc.) as interactive web pages and JSON APIs. It's popular among journalists, data analysts, and open-data advocates. - datasette-apps is a new plugin/extension (currently in early alpha, version 0.1a3) that lets people build lightweight "apps" on top of Datasette — think dashboards or mini web apps that query and display data without needing to write server code. - The permission fixes (issues #27 and #29) are important for security: they ensure that only authorized users can create or edit apps, and that ownership rules work consistently with Datasette's existing permission system.

Related stories

  • Show HN: HtmlUnit 5.0.0 Is Available

    3.0

    HtmlUnit 5.0.0 has been released, now requiring JDK 17 as the minimum version. Key updates include major JavaScript engine improvements, full Web Crypto API support, WebSocket improvements, Web Speech API support, and updated browser profiles for Firefox 150 and Chrome/Edge 148.

  • Show HN: JsPlumb is now free for non-commercial usage

    1.5

    JsPlumb, the JavaScript library for building visual connectivity interfaces, has released a major update with a modernized API and new diagram/2D chart engines. The project is now free for non-commercial use, with packages available for React, Angular, Vue, Svelte, and vanilla JS on the public NPM registry.

  • Datasette-apps: Apps that live inside Datasette

    1.0

    Datasette-apps is a new system that allows users to bundle and install full applications within Datasette, turning it into a platform for data-driven apps. It enables developers to create self-contained packages combining SQLite databases, metadata, plugins, templates, and assets.