Skip to content

Restricted database query action to admins#1313

Merged
vytisbulkevicius merged 2 commits into
developmentfrom
bugfix/pro/587
May 19, 2026
Merged

Restricted database query action to admins#1313
vytisbulkevicius merged 2 commits into
developmentfrom
bugfix/pro/587

Conversation

@girishpanchal30
Copy link
Copy Markdown
Contributor

Summary

Only administrators and super admins can perform database query actions.

Check before Pull Request is ready:

Closes https://github.com/Codeinwp/visualizer-pro/issues/587

@girishpanchal30 girishpanchal30 requested a review from Copilot May 7, 2026 12:34
@girishpanchal30 girishpanchal30 added the pr-checklist-skip Allow this Pull Request to skip checklist. label May 7, 2026
@pirate-bot pirate-bot added the pr-checklist-complete The Pull Request checklist is complete. (automatic label) label May 7, 2026
@pirate-bot
Copy link
Copy Markdown
Contributor

pirate-bot commented May 7, 2026

Plugin build for f681d3c is ready 🛎️!

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Restricts the AI Builder “database query” upload action to privileged users to reduce exposure of sensitive DB access functionality.

Changes:

  • Added permission checks for the db_query source type within AIBuilder::uploadData() to prevent unauthorized users from submitting DB queries.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread classes/Visualizer/Module/AIBuilder.php Outdated
@vytisbulkevicius vytisbulkevicius merged commit 09ed3f9 into development May 19, 2026
10 checks passed
@vytisbulkevicius vytisbulkevicius deleted the bugfix/pro/587 branch May 19, 2026 06:47
@pirate-bot
Copy link
Copy Markdown
Contributor

🎉 This PR is included in version 4.0.2 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

@pirate-bot pirate-bot added the released Indicate that an issue has been resolved and released in a particular version of the product. label May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr-checklist-complete The Pull Request checklist is complete. (automatic label) pr-checklist-skip Allow this Pull Request to skip checklist. released Indicate that an issue has been resolved and released in a particular version of the product.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants