forked from rorx/redmine_wiki_sql
-
Notifications
You must be signed in to change notification settings - Fork 0
galdosd/redmine_wiki_sql
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
This plugins allows a redmine user to run SQL queries inside redmine's wiki pages. Installation Follow the default redmine plugin installation steps at http://www.redmine.org/projects/redmine/wiki/Plugins Then set up the DB config via the admin panel in Administration > Plugins > Wiki SQL: Configure a seperate user with read only minimal permissions to the database you want to use (may be redmine or any other unrelated database - only MySQL supported for now, more available as needed?) ALWAYS make sure it is a readonly user. Control how many resources (cpu/memory) can be consumed by this user, because any user of redmine can cause queries to be executed by tricking an authorized user into viewing any comment editable by the attacker. Then, for reading security, only users with 'SQL Authority' custom field value of 'True' will actually be able to view the tables. Usage: Put this inside a wiki page: {{sql(somedatabasename) select some from thing where blah = 81 }} Examples: {{sql(redmine) select id as 'ID', subject as 'Subject', DATE_FORMAT(issues.due_date , '%d/%m/%Y') AS 'Due Date' from issues }} {{sql(redmine) select curdate(), 2+40, "If you can see this, it worked!" }} Fixed former problems: - User has to manually escape parenthesis with \ [SOLVED] - User cannot format SQL across multiple lines for complex queries [SOLVED] - Can't change column's order [SOLVED] Added features - Returned text is itself textilized which can be quite nice when e.g., pulling formatted redmine text out of db! Known problems - Would still be nice to restrict EDITING queries rather than VIEWING them (would be more hassle) - Would be nice to allow auto-retextilization to support markdown and to make it optional - auto-retextilization can give an infinite loop if someone is so unwise as to make it refer to itself...
About
Safer and more powerful version of the Redmine plugin that allows you to run SQL queries and have them shown on your wiki in table format.
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published
Languages
- Ruby 100.0%