Skip to content

Restricted database query action to admins#1313

Open
girishpanchal30 wants to merge 2 commits intodevelopmentfrom
bugfix/pro/587
Open

Restricted database query action to admins#1313
girishpanchal30 wants to merge 2 commits intodevelopmentfrom
bugfix/pro/587

Conversation

@girishpanchal30
Copy link
Copy Markdown
Contributor

Summary

Only administrators and super admins can perform database query actions.

Check before Pull Request is ready:

Closes https://github.com/Codeinwp/visualizer-pro/issues/587

@girishpanchal30 girishpanchal30 requested a review from Copilot May 7, 2026 12:34
@girishpanchal30 girishpanchal30 added the pr-checklist-skip Allow this Pull Request to skip checklist. label May 7, 2026
@pirate-bot pirate-bot added the pr-checklist-complete The Pull Request checklist is complete. (automatic label) label May 7, 2026
@pirate-bot
Copy link
Copy Markdown
Contributor

pirate-bot commented May 7, 2026

Plugin build for f681d3c is ready 🛎️!

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Restricts the AI Builder “database query” upload action to privileged users to reduce exposure of sensitive DB access functionality.

Changes:

  • Added permission checks for the db_query source type within AIBuilder::uploadData() to prevent unauthorized users from submitting DB queries.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread classes/Visualizer/Module/AIBuilder.php Outdated
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-checklist-complete The Pull Request checklist is complete. (automatic label) pr-checklist-skip Allow this Pull Request to skip checklist.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants