gristlabs_grist-core/app
Alex Hall 333ed863f4 (core) Only allow getFormulaError for clients with access to read the cell
Summary: The previous access check in `getFormulaError` was not strict enough, allowing users to read the values of individual formula cells that they shouldn't be able to. Now `getCellValue` is used to check the access for the specific cell first.

Test Plan: Extended GranularAccess server test.

Reviewers: paulfitz

Reviewed By: paulfitz

Subscribers: paulfitz

Differential Revision: https://phab.getgrist.com/D3526
2022-07-14 22:50:57 +02:00
..
client (core) Fix cell selection bugs 2022-07-12 08:50:05 -07:00
common (core) Nice summary table IDs 2022-07-14 12:09:56 +02:00
gen-server (core) add a yarn run cli tool, and add a sqlite gristify option 2022-07-14 12:00:30 -04:00
plugin (core) Speed up and upgrade build. 2022-06-27 16:10:10 -04:00
server (core) Only allow getFormulaError for clients with access to read the cell 2022-07-14 22:50:57 +02:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00