Upgrade to 2.0

2.0 makes data access explicit and tightens the server-side protocol.

Authorize every grid

Implement the new method on every GridInterface implementation. Return true only when the backend user may read the rows exposed by that grid. For module-specific grids, check access to the owning module; for record data, apply any table and record-level policy required by your extension.

public function isAccessible(BackendUserAuthentication $backendUser): bool
{
    return $backendUser->check('modules', 'my_module');
}

Protocol limits

length must be positive. The server returns at most 100 rows per request by default. Use setMaxPageLength() to select a smaller or larger explicit limit. Requests with more than 100 columns, more than 5 order clauses, an offset above 1,000,000, or search text longer than 255 characters receive 400.

Search and ordering

Search treats SQL LIKE metacharacters literally. All valid order clauses are now applied in the order sent by DataTables.