3 Commits

Author	SHA1	Message	Date
Paul Fitzpatrick	0e131c2546	(core) do not allow anonymous user to set a name ... Summary: Only allow authorized users to set names. This excludes the anonymous user. Seems to be a narrow issue isolated to the `POST /api/profile/user/name` endpoint, other `profile` posts/deletes are already restricted to authorized users. Test Plan: added a test Reviewers: dsagal Reviewed By: dsagal Differential Revision: https://phab.getgrist.com/D2574	2020-08-04 17:56:13 -04:00
Dmitry S	671dc24214	(core) Allow the support user to access everyone's billing pages ... Summary: Give specialPermit to the support user for page loads and API requests needed to serve billing pages. Test Plan: Added new test cases Reviewers: paulfitz Reviewed By: paulfitz Differential Revision: https://phab.getgrist.com/D2554	2020-07-22 15:45:47 -04:00
Paul Fitzpatrick	5ef889addd	(core) move home server into core ... Summary: This moves enough server material into core to run a home server. The data engine is not yet incorporated (though in manual testing it works when ported). Test Plan: existing tests pass Reviewers: dsagal Reviewed By: dsagal Differential Revision: https://phab.getgrist.com/D2552	2020-07-21 20:39:10 -04:00