Simon Willison

Another option: rethink permissions to always work in terms of where clauses users as part of a SQL query that returns the overall allowed set of databases or tables. This...

One option: keep the existing `permission_allowed()` hook (since dozens of plugins use it already), but offer a new plugin hook which uses the SQL-level permissions instead. If your plugin implements...

Relevant quote: https://simonwillison.net/2024/Apr/16/wkirby-on-hacker-news/ > Permissions have three moving parts, who wants to do it, what do they want to do, and on what object. Any good permission system has to...

I think the `_internal` table is going to need to grow a `actors` table for this - without that I don't know how we would efficiently answer the "who can...

Here's where it's called: https://github.com/simonw/datasette/blob/8f9509f00cceea8dc87403c28b2056db7b246ed4/datasette/app.py#L649-L695

And here's that `_metadata_recursive_update() method: https://github.com/simonw/datasette/blob/8f9509f00cceea8dc87403c28b2056db7b246ed4/datasette/app.py#L638-L647

Which Docker image are you using here? It looks like it's missing SpatiaLite from the image.

Oh this is with `datasette package`? That should work. Will investigate.

Trying this out locally with this 69MB SpatiaLite file I happened to have lying around (from testing `shapefile-to-sqlite` a while ago): https://static.simonwillison.net/static/2022/nps-spatialite.db ``` % datasette package nps-spatialite.db --spatialite ... =>...

Did you use the `--spatialite` option? I just tried this: datasette package nps-spatialite.db It built the image OK (I didn't see the error you reported), but running the container failed...