4 ms·
I like the idea of having some way to do unauthenticated calls, but would it be possible to layer on some additional granularity or would that be asking too muc
by fbdab103 4y ago
I like the idea of having some way to do unauthenticated calls, but would it be possible to layer on some additional granularity or would that be asking too much when the security infrastructure already exists?
That is, I might want to be able to append data without any ceremony (logs?), but schema changes or data mutation would require credentials.
- simonw 4y agoThe big feature in the next alpha will be the ability to create tokens that have a subset of permissions - eg can only write to specific tables: https://github.com/simonw/datasette/issues/1855 https://github.com/simonw/datasette/issues/1855 But maybe a mechanism for easily specifying that for anonymous localhost users would be useful too?