gristlabs_grist-core

mirror of https://github.com/gristlabs/grist-core.git synced 2026-03-02 04:09:24 +00:00

Files

Alex Hall 333ed863f4 (core) Only allow getFormulaError for clients with access to read the cell

Summary: The previous access check in `getFormulaError` was not strict enough, allowing users to read the values of individual formula cells that they shouldn't be able to. Now `getCellValue` is used to check the access for the specific cell first.

Test Plan: Extended GranularAccess server test.

Reviewers: paulfitz

Reviewed By: paulfitz

Subscribers: paulfitz

Differential Revision: https://phab.getgrist.com/D3526

2022-07-14 22:50:57 +02:00

declarations

(core) disentangle some server tests, release to core, add GRIST_PROXY_AUTH_HEADER test

2022-03-24 15:11:32 -04:00

lib

(core) Only allow getFormulaError for clients with access to read the cell

2022-07-14 22:50:57 +02:00

utils

(core) add a yarn run cli tool, and add a sqlite gristify option

2022-07-14 12:00:30 -04:00

companion.ts

(core) add a yarn run cli tool, and add a sqlite gristify option