databricks-tellr-app 0.4.3.dev42__tar.gz → 0.4.3.dev3400__tar.gz

{databricks_tellr_app-0.4.3.dev42 → databricks_tellr_app-0.4.3.dev3400}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev42
+Version: 0.4.3.dev3400
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown

{databricks_tellr_app-0.4.3.dev42 → databricks_tellr_app-0.4.3.dev3400}/databricks_tellr_app.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: databricks-tellr-app
-Version: 0.4.3.dev42
+Version: 0.4.3.dev3400
 Summary: Tellr application package for Databricks Apps
 Requires-Python: >=3.10
 Description-Content-Type: text/markdown

{databricks_tellr_app-0.4.3.dev42 → databricks_tellr_app-0.4.3.dev3400}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "databricks-tellr-app"
-version = "0.4.3.dev42"
+version = "0.4.3.dev3400"
 description = "Tellr application package for Databricks Apps"
 readme = "README.md"
 requires-python = ">=3.10"

{databricks_tellr_app-0.4.3.dev42 → databricks_tellr_app-0.4.3.dev3400}/src/api/routes/profiles.py

@@ -7,7 +7,7 @@ from typing import Any, Optional
 from fastapi import APIRouter, HTTPException
 from pydantic import BaseModel, Field
 
-from src.api.routes._authz import _check_deck_permission_for_session
+from src.api.routes._authz import _check_deck_permission_for_session, require_admin
 from src.api.schemas.agent_config import (
     AgentConfig,
     resolve_agent_config,
@@ -282,6 +282,10 @@ async def update_profile(profile_id: int, body: UpdateProfileRequest):
         perm_service.require_edit_profile(db, profile_id)
         profile = _get_profile(db, profile_id)
 
+        if body.is_default is not None:
+            # is_default is workspace-wide; promoting or demoting it is an admin action.
+            require_admin()
+
         if body.name is not None:
             profile.name = body.name
         if body.description is not None:

{databricks_tellr_app-0.4.3.dev42 → databricks_tellr_app-0.4.3.dev3400}/src/services/converter_jail/jail.py

@@ -115,11 +115,6 @@ def netns_available() -> bool:
         except Exception:
             result = False
     _netns_cache = result
-    # NOTE (F-CR-30): in Databricks Apps `unshare --net` is typically
-    # unavailable. We deliberately do NOT fail closed: that would disable all
-    # PPTX/GSlides production conversion. Residual risk is accepted because the
-    # child env is whitelisted via build_scrubbed_env (no credentials) and the
-    # host-side AST import allowlist runs before every jail exec.
     if not result:
         logger.warning(
             "Network namespace unavailable — converter jail runs without netns. "

{databricks_tellr_app-0.4.3.dev42 → databricks_tellr_app-0.4.3.dev3400}/src/services/html_to_google_slides.py

@@ -1355,15 +1355,6 @@ class HtmlToGoogleSlidesConverter:
         import shutil as _shutil
         import tempfile as _tempfile
         from src.services.converter_jail import protocol, run_gslides_jail
-        from src.services.converter_jail.ast_guard import DisallowedImport, check_imports
-
-        # Same host-side AST allowlist as _build_gslides_job_dir (F-CR-30): a
-        # rejected snippet is never written or exec'd; caller falls back.
-        try:
-            check_imports(code)
-        except (DisallowedImport, SyntaxError) as exc:
-            logger.warning("GSlides retry snippet rejected pre-jail: %s", exc)
-            return None
 
         job_dir = _tempfile.mkdtemp(prefix="gslides_retry_")
         try: