Download Latest Version
3.2 - Per-User Access Control, Materialized Views in RAG, and a Business Design Refresh source code.zip (1.6 MB)
Get an email when there's a new version of OpenSparrow
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| opensparrow-3.2.zip | 2026-08-12 | 1.4 MB | |
| opensparrow-3.2.zip.sha256 | 2026-08-12 | 86 Bytes | |
| 3.2 - Per-User Access Control, Materialized Views in RAG, and a Business Design Refresh source code.tar.gz | 2026-08-12 | 1.3 MB | |
| 3.2 - Per-User Access Control, Materialized Views in RAG, and a Business Design Refresh source code.zip | 2026-08-12 | 1.6 MB | |
| README.md | 2026-08-12 | 2.1 kB | |
| Totals: 5 Items | 4.3 MB | 3 | |
Added
- Per-user access control — new Users > Access tab; independent allow-lists per user across tables, views, printouts, boards, and workflows (
user_table_accessconfig key). Empty/absent list means unrestricted, not no-access — deactivate the account to fully cut a user off. - RAG: materialized views as aggregate views — the 3.1 aggregate-view feature now accepts materialized views (flagged in the admin UI) in addition to regular views; Views Sync also discovers materialized views.
- CRM demo install options — richer description plus optional demo-user and audit-history toggles at install time.
Changed
- Business design system — admin panel, setup wizard, and frontend unified onto a single Business 4+1 color palette and one system-ui font stack; every front-end button now shares one height, weight, border radius, and font size.
- API endpoints refactored onto shared
os_api_action()/os_api_dispatch()helpers; four endpoints (files, comments, mass-edit, data-cleanup) routed through them. - Admin documentation updated across several sections to match current module behavior.
- Release packaging now excludes
creator/,dist-local/, andstorage/tmp/from image and release archives.
Security
- Per-user access is now gated by default at the API boundary, not only hidden in the UI: table, view, print, board, workflow, FK, file, comment, mass-edit, and data-cleanup endpoints all enforce the configured allow-lists.
- Delegated FK lookups narrowed to label-projection columns only.
- Schema endpoint filtered by table access; file listing filtered by record ownership.
- Workflow runs gated by their step tables, closing remaining access-boundary gaps.
Fixed
- An all-digit table name is now kept as a string through the hidden-subtable closure (was being coerced to a number).
Full changelog: https://github.com/wrobeltomasz/OpenSparrow/compare/3.1...3.2
