tr
TryGhost
GitHub
Ghost
Workspace
GitHub
CI Pipeline Executions
Filtered
Runs
Demo
Insights
Compare tasks
Analytics
Sign in
Toggle sidebar
Overview
⌘K
Ghost
Loading workspace stats
Loading workspace insights...
Statistics interval
7 days
30 days
Latest CI Pipeline Executions
Status
Fix filter
Filter
Fuzzy
Filter range
Sort by
Sort by
Start time
Sort ascending
Sort descending
GitHub
Ghost
Workspace
Succeeded
30138
4c67d5d4 Added post export permissions to the backup integration ref https://linear.app/ghost/issue/GVA-907/ - Ghost(Pro) archives are gaining a `post-analytics.csv` alongside the existing `members.csv`, fetched from `GET /ghost/api/admin/posts/export/` with the `ghost-backup` integration key, and that endpoint is gated on `browse post` - There is no explicit export posts permission, so we use browse posts - exactly how `browse member` was added to this role in v5.121.0 to allow the members export - The role already holds `db: all`, and `posts` is in the database exporter's `TABLES_ALLOWLIST`, so the key can already read every post in full through the db export; this grants no data it could not already reach, just a narrower capability through a different door - It does open `/posts/` browse generally rather than only the export route, since permissions are per action type rather than per endpoint - Applied in fixtures and with a migration so both new and existing sites get the update, and mirrored into the test fixtures
by Michael Ba...
M
Succeeded
30138
7da24043 Added post export permissions to the backup integration ref https://linear.app/ghost/issue/GVA-907/ - Ghost(Pro) archives are gaining a `post-analytics.csv` alongside the existing `members.csv`, fetched from `GET /ghost/api/admin/posts/export/` with the `ghost-backup` integration key, and that endpoint is gated on `browse post` - There is no explicit export posts permission, so we use browse posts - exactly how `browse member` was added to this role in v5.121.0 to allow the members export - The role already holds `db: all`, and `posts` is in the database exporter's `TABLES_ALLOWLIST`, so the key can already read every post in full through the db export; this grants no data it could not already reach, just a narrower capability through a different door - It does open `/posts/` browse generally rather than only the export route, since permissions are per action type rather than per endpoint - Applied in fixtures and with a migration so both new and existing sites get the update, and mirrored into the test fixtures
by Michael Ba...
M
Previous
Next