7span / directus-extension-custom-query-panel Goto Github PK

Hello, this is basically opening up the whole database to the public.
Shouldn't be at least a very big warning about that in the README?
This extension is very useful, but unless this is addressed, it can only be used in closed environments.

Do you have any ideas about how to secure it?
Something query based, I think it would be a good start.

For example

• User read permissions for cqp_queries: id in [1,2]
• Public read permissions for cqp_queries: id in [3]

If you are interested in a PR i could give it a go!

I'm not able to see my custom query panel in the panel section fro my insights..
I follow the instructions as you mentioned. Am I missing something?

Hi team

I was able to create query, it seems to run successfully (returning status code of 200)

However, it did not show any item in the table

To reproduce:

• Directus 10.7.2
• Postgres 15