Paul Fitzpatrick f53ab2cb30 (core) forbids edits when "view as" user is a viewer and access rules are permissive ...

Summary:
Currently, if access rules are set to allow edits unconditionally,
and an owner does "View As" a user who is a viewer only, they will
be allowed to make edits.  This catches that condition and adds a
test.

Test Plan: added test

Reviewers: georgegevoian

Reviewed By: georgegevoian

Differential Revision: https://phab.getgrist.com/D2991

2021-08-20 16:04:28 -04:00

..

ACLFormula.ts

(core) add OWNERS='owners', EDITOR='editors', VIEWER='viewers' to condition formulas

2021-03-19 18:20:33 -04:00

ActionHistory.ts

…

ActionHistoryImpl.ts

(core) Log the time taken by decodeActionFromRow() operations.

2021-08-20 11:28:33 -04:00

ActionSummary.ts

…

ActiveDoc.ts

(core) Linking summary tables grouped by list columns

2021-08-10 20:41:24 +02:00

ActiveDocImport.ts

…

AppEndpoint.ts

(core) Adding import from google drive to the home screen

2021-08-05 20:46:11 +02:00

Authorizer.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

BrowserSession.ts

(core) revive saml support and test against Auth0

2021-08-16 17:36:09 -04:00

checksumFile.ts

…

Client.ts

(core) Remove LoginSession, which was mainly serving situations that are no longer used.

2021-07-12 13:04:00 -04:00

Comm.js

(core) Remove LoginSession, which was mainly serving situations that are no longer used.

2021-07-12 13:04:00 -04:00

dbUtils.ts

…

DocApi.ts

(core) Add /columns endpoint to DocApi

2021-08-17 23:20:52 +02:00

DocClients.ts

…

DocManager.ts

(core) Adding import from google drive to the home screen

2021-08-05 20:46:11 +02:00

DocPluginData.ts

…

DocPluginManager.ts

(core) Move file import plugins into core/sandbox/grist

2021-08-09 18:37:14 +02:00

DocSession.ts

(core) read document as owner in pre-fork mode, if have sufficient access to it

2021-07-21 14:52:31 -04:00

DocSnapshots.ts

…

DocStorage.ts

(core) Barely working reference lists in frontend

2021-07-23 18:41:44 +02:00

DocStorageManager.ts

(core) uncheck FullCopy special when copying/forking a document

2021-04-29 08:56:54 -04:00

docUtils.d.ts

…

docUtils.js

…

DocWorker.ts

(core) Export to Excel and Send to drive

2021-07-21 16:36:00 +02:00

DocWorkerMap.ts

(core) revive saml support and test against Auth0

2021-08-16 17:36:09 -04:00

ExcelFormatter.ts

(core) Export to Excel and Send to drive

2021-07-21 16:36:00 +02:00

ExpandedQuery.ts

(core) Linking summary tables grouped by list columns

2021-08-10 20:41:24 +02:00

Export.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

ExportCSV.ts

(core) Export to Excel and Send to drive

2021-07-21 16:36:00 +02:00

ExportXLSX.ts

(core) Google auth endpoint has not responded with auth code

2021-07-21 20:18:04 +02:00

expressWrap.ts

…

ExternalStorage.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

extractOrg.ts

(core) Refactoring google drive plugin

2021-07-14 09:52:04 +02:00

FileParserElement.ts

…

filterUtils.ts

(core) uncheck FullCopy special when copying/forking a document

2021-04-29 08:56:54 -04:00

FlexServer.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

GoogleAuth.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

GoogleExport.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

GoogleImport.ts

(core) Adding google drive plugin as a fallback for url plugin

2021-08-04 17:59:13 +02:00

GranularAccess.ts

(core) forbids edits when "view as" user is a viewer and access rules are permissive

2021-08-20 16:04:28 -04:00

GristServer.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

gristSessions.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

guessExt.ts

…

HashUtil.ts

…

HostedMetadataManager.ts

…

HostedStorageManager.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

IBilling.ts

…

IChecksumStore.ts

…

ICreate.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

IDocStorageManager.ts

(core) uncheck FullCopy special when copying/forking a document

2021-04-29 08:56:54 -04:00

idUtils.ts

…

IElectionStore.ts

…

INotifier.ts

…

ISandbox.ts

…

IShell.ts

…

ITestingHooks-ti.ts

(core) Remove a bunch of dead code

2021-07-01 18:38:21 +02:00

ITestingHooks.ts

(core) Remove a bunch of dead code

2021-07-01 18:38:21 +02:00

log.ts

…

manifest.ts

…

MinimalLogin.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

NSandbox.ts

(core) Move file import plugins into core/sandbox/grist

2021-08-09 18:37:14 +02:00

OnDemandActions.ts

(core) Configure more comprehensive eslint rules for Typescript

2021-04-26 18:54:55 -04:00

PermissionInfo.ts

(core) Add 'user' variable to trigger formulas

2021-07-15 15:18:32 -07:00

Permit.ts

(core) revive saml support and test against Auth0

2021-08-16 17:36:09 -04:00

places.ts

…

PluginEndpoint.ts

…

PluginManager.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

reportTimeTaken.ts

(core) Log the time taken by decodeActionFromRow() operations.

2021-08-20 11:28:33 -04:00

requestUtils.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

RowAccess.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

SafePythonComponent.ts

(core) Move file import plugins into core/sandbox/grist

2021-08-09 18:37:14 +02:00

SamlConfig.ts

(core) lightly freshen the core readme, mentioning roadmap and forums etc.

2021-08-17 23:51:58 -04:00

sandboxUtil.js

…

sendAppPage.ts

(core) Google auth endpoint has not responded with auth code

2021-07-21 20:18:04 +02:00

ServerColumnGetters.ts

…

serverUtils.ts

(core) start applying defenses for untrusted document uploads

2021-07-14 18:34:27 -04:00

Sessions.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

Sharing.ts

(core) Add 'user' variable to trigger formulas

2021-07-15 15:18:32 -07:00

shortDesc.ts

…

shutdown.js

…

SQLiteDB.ts

…

TagChecker.ts

…

TestingHooks.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

Throttle.ts

…

TimeQuery.ts

…

UnsafeNodeComponent.ts

…

uploads.ts

(core) Adding google drive plugin as a fallback for url plugin

2021-08-04 17:59:13 +02:00

WorkCoordinator.ts

…