AI-Cognitive-Leap/agnes-the-ai-analyst
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: set enable_external_access=false AFTER ATTACHing extracts

Browse source
This commit is contained in:
ZdenekSrotyr 2026-04-08 12:29:27 +02:00
parent 6efdf4ca64
commit f2f9a62803
1 changed files with 6 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
src/db.py
View file

@ -222,11 +222,7 @@ def get_analytics_db_readonly() -> duckdb.DuckDBPyConnection:
db_path.parent.mkdir(parents=True, exist_ok=True)
return duckdb.connect(str(db_path), read_only=False)
conn = duckdb.connect(str(db_path), read_only=True)
try:
conn.execute("SET enable_external_access = false")
except Exception:
pass
# ATTACH extract.duckdb files so views referencing them work
# ATTACH extract.duckdb files FIRST so views referencing them work
extracts_dir = _get_data_dir() / "extracts"
if extracts_dir.exists():
for ext_dir in sorted(extracts_dir.iterdir()):
@ -236,6 +232,11 @@ def get_analytics_db_readonly() -> duckdb.DuckDBPyConnection:
conn.execute(f"ATTACH '{db_file}' AS {ext_dir.name} (READ_ONLY)")
except Exception:
pass
# Disable external access AFTER attaches (blocks user file reads but allows attached DBs)
try:
conn.execute("SET enable_external_access = false")
except Exception:
pass
return conn