skadi 0.4.0.beta.5 → 0.4.0.beta.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 26e484cfbf6df5f66d12b5564e657a2cdf41d78c833dae12bde108eaff328823
-  data.tar.gz: 3d0280b22ab68f9dc6f625a6cc8d4b135a69d63d96d5e5d7e01d5f67353e61a1
+  metadata.gz: 8fad66500a6f01a326ce57479a300747813664e1f4beb14b5304a50b85336ae3
+  data.tar.gz: 66ca1b5bec688d00bdd1be67d19cc22675c26c77aac5378f9260c55e2c9afb8c
 SHA512:
-  metadata.gz: e47cc2275373be9eb23bb58748efcf24a95b3124ff636dc9f48a7d7328413705241ce6116fc012efcfc32c441ed605f7ce0613fd311ff220505aec37757fbd93
-  data.tar.gz: 34b2d8ce650b3795af5b4edcc92532dfecfca8d3737426b3ebd038f3aed15adddf57584d5de0b99bc8c9c2537db8b31bd7a40c5eb5b058221e21e948837cae88
+  metadata.gz: f00ce9d81afada960d03be0ba7c3b54b362d66dd616cb35b35dc19e29bc5c029da485e0e06993940d0f33582132b59a495b7f1c5b388ca26b2ecf26078897c99
+  data.tar.gz: 742cc0ae411e0c3c5bba2fb72f6d0831b72d1840309f8a9b6ecbffa4d671515aae49ccb5c65410c5d334c554a62949d170de1a06026eba0dbb408663961aff87

data/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 0.4.0.beta.6 [2026-09-29]
+- Remove restrictions on SQL for table datasets
+
 ## 0.4.0.beta.5 [2026-09-21]
 - Fix inconsistent ordering of SQL datasets
 - Add CI

data/app/models/skadi/dashboard_query.rb

@@ -71,6 +71,17 @@ module Skadi
       end
 
       private def build_sql_query(dataset, chart, untrusted_param_filters)
+        # The table chart can display arbitrary data so we allow any columns
+        if chart["type"] == "table"
+          # We still wrap in a subquery to prevent data modification
+          return "
+            SELECT
+              *
+            FROM
+              (#{dataset["sql"]}) AS t
+          "
+        end
+
         model = Skadi::Visit
 
         safe_group = [ "t.split" ]

data/app/models/skadi/dashboard_validator.rb

@@ -137,10 +137,10 @@ module Skadi
       return @types
     end
 
-    Context = Struct.new(:record, :allowed_sql_strings, :dataset_ids)
+    Context = Struct.new(:record, :allowed_sql_strings, :dataset_ids, :chart_type)
 
     def validate(record)
-      context = Context.new(record, nil, [])
+      context = Context.new(record, nil, [], nil)
 
       validate_type(ArrayOf.new(:DashboardTabConfig, 1), record.configuration, "configuration", context:)
     end
@@ -262,7 +262,7 @@ module Skadi
         return add_error(path, "must be a string", context:)
       end
 
-      unless [ "date", "split", "count" ].all? { |it| value.include?(it) }
+      unless context.chart_type == "table" || [ "date", "split", "count" ].all? { |it| value.include?(it) }
         add_error(path, "must include the fields date, split and count", context:)
       end
     end
@@ -314,6 +314,8 @@ module Skadi
       return add_error(path, "Unknown type #{type.inspect}", context:) unless self.class.types.key?(type)
 
       if type == :ChartConfig && value.is_a?(Hash)
+        context.chart_type = value["type"]
+
         context.dataset_ids = []
 
         if value["datasets"].is_a?(Array)

data/lib/skadi/version.rb

@@ -1,3 +1,3 @@
 module Skadi
-  VERSION = "0.4.0.beta.5"
+  VERSION = "0.4.0.beta.6"
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: skadi
 version: !ruby/object:Gem::Version
-  version: 0.4.0.beta.5
+  version: 0.4.0.beta.6
 platform: ruby
 authors:
 - Simon J
 bindir: bin
 cert_chain: []
-date: 2026-09-21 00:00:00.000000000 Z
+date: 2026-09-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails