2sys/phonograph
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

allow empty values to be provided to insert for system cols

Browse source
This commit is contained in:
Brent Schroeter 2025-10-07 06:23:50 +00:00
parent f557654da8
commit 37d0922fd3
1 changed files with 9 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
interim-server/src/routes/relations_single/insert_handler.rs
View file

@ -81,7 +81,15 @@ pub(super) async fn post(
let col_names: Vec<String> = form.keys().cloned().collect(); let col_names: Vec<String> = form.keys().cloned().collect();
// Prevent users from modifying Phonograph metadata columns. // Prevent users from modifying Phonograph metadata columns.
if col_names.iter().any(|col| col.starts_with('_')) { if form.iter().any(|(col, values)| {
col.starts_with('_')
&& values.iter().any(|value| {
serde_json::from_str::<Datum>(value)
.ok()
.map(|value| !value.is_none())
.unwrap_or(false)
})
}) {
return Err(forbidden!("access denied to update system metadata column")); return Err(forbidden!("access denied to update system metadata column"));
} }