explorerhq / explorerhq/sql-explorer
Permissions should be `False` by default
Open
- Dominant language
- Python
- Stars
- 2.9k
- Forks
- 373
- PR merge metrics
- No merged PRs in 30d
Description
Just had a bit of a scare. I did not set `EXPLORER_PERMISSION_CHANGE` in my `settings.py`, only `EXPLORER_PERMISSION_VIEW`. Because of this, `/explorer/play` and `explorer/new` were accessible by any user. I think it would be better if these defaulted to `False` to prevent access problems.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.