| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| opensparrow-4.6.zip | 2026-11-11 | 3.8 MB | |
| opensparrow-4.6.zip.sha256 | 2026-11-11 | 86 Bytes | |
| README.md | 2026-11-11 | 1.2 kB | |
| Totals: 3 Items | 3.8 MB | 4 | |
Added
- Per-table write permissions (create / edit / delete) in Users → Access: on top of the table allow-list, each ticked table can narrow what an editor may write, enforced server-side.
- "Last change" diff in the Record History tab, backed by spw_record_snapshots.
Changed
- Click statistics are now recorded in demo mode; DEMO_MODE is documented as blocking admin-panel writes only, leaving frontend record edits enabled.
- Admin docs and README updated for per-table write permissions.
Fixed
- The frontend write preamble now derives the required operation from the same matched route that dispatches the handler, closing an authorization bypass where a request could be authorized for one operation and executed as another.
Upgrade notes
- No database migration, no removed files and no removed config keys. Per-table write permissions live in the user_table_access config key and default to full CRUD, so existing accounts are unaffected.
Full changelog: https://github.com/wrobeltomasz/OpenSparrow/compare/4.5...4.6
