mirror of https://github.com/buster-so/buster.git
2e04af1785
- Fixed permission hierarchy: full_access (5) now correctly ranks higher than viewer (3) - Removed 'querier' role from admin permission check as it was too permissive - Added organizationId parameter to dashboard access checks to prevent unauthorized access - Fixed public dashboard expiry date check to verify dates are in the future - Added cycle detection for collection permissions to prevent infinite recursion - Fixed bulk remove permissions to correctly filter by identityIds array - Updated date comparison to use ISO string format for PostgreSQL timestamp columns These fixes address critical security and logic issues identified in the PR review. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com> |
||
|---|---|---|
| .cursor/rules | ||
| .github | ||
| .vscode | ||
| apps | ||
| assets | ||
| ee | ||
| packages | ||
| scripts | ||
| .DS_Store | ||
| .env.example | ||
| .gitignore | ||
| .pnpmrc | ||
| .release-please-config.json | ||
| CLAUDE.md | ||
| LICENSE | ||
| Makefile | ||
| README.md | ||
| SECURITY.md | ||
| biome.json | ||
| docker-compose.yml | ||
| package.json | ||
| pnpm-lock.yaml | ||
| pnpm-workspace.yaml | ||
| tsconfig.json | ||
| turbo.json | ||
| vitest.config.ts | ||
README.md
The Buster Platform
Build reliable AI data analysts
What is Buster?
Buster is an open-source platform for deploying AI data analysts - empowering everyone at your company to explore data on their own.
Support and feedback
You can contact us through either:
- Github Discussions
- Email us at founders at buster dot com
License
This repository is MIT licensed, except for the ee folders. See LICENSE for more details.