mirror of
https://github.com/gristlabs/grist-core.git
synced 2024-10-27 20:44:07 +00:00
Summary: This diff discounts indirect changes for access control purposes. A UserAction that updates a cell A, which in turn causes changes in other dependent cells, will be considered a change to cell A for access control purposes. The `engine.apply_user_actions` method now returns a `direct` array, with a boolean for each `stored` action, set to `true` if the action is attributed to the user or `false` if it is attributed to the engine. `GranularAccess` ignores actions attributed to the engine when checking for edit rights. Subtleties: * Removal of references to a removed row are considered direct changes. * Doesn't play well with undos as yet. An action that indirectly modifies a cell the user doesn't have rights to may succeed, but it will not be reversible. Test Plan: added tests, updated tests Reviewers: dsagal Reviewed By: dsagal Differential Revision: https://phab.getgrist.com/D2806 |
||
---|---|---|
.. | ||
functions | ||
imports | ||
acl_formula.py | ||
acl.py | ||
action_obj.py | ||
action_summary.py | ||
actions.py | ||
autocomplete_context.py | ||
codebuilder.py | ||
column.py | ||
csv_patch.py | ||
depend.py | ||
docactions.py | ||
docmodel.py | ||
engine.py | ||
gencode.py | ||
gpath.py | ||
grist.py | ||
identifiers.py | ||
import_actions.py | ||
logger.py | ||
lookup.py | ||
main.py | ||
match_counter.py | ||
migrations.py | ||
moment_parse.py | ||
moment.py | ||
objtypes.py | ||
records.py | ||
relabeling.py | ||
relation.py | ||
repl.py | ||
runtests.py | ||
sandbox.py | ||
schema.py | ||
summary.py | ||
table_data_set.py | ||
table.py | ||
test_acl_formula.py | ||
test_acl_renames.py | ||
test_actions.py | ||
test_codebuilder.py | ||
test_column_actions.py | ||
test_completion.py | ||
test_default_formulas.py | ||
test_derived.py | ||
test_display_cols.py | ||
test_docmodel.py | ||
test_engine.py | ||
test_find_col.py | ||
test_formula_error.py | ||
test_formula_undo.py | ||
test_functions.py | ||
test_gencode.py | ||
test_gpath.py | ||
test_import_actions.py | ||
test_import_transform.py | ||
test_logger.py | ||
test_lookups.py | ||
test_match_counter.py | ||
test_migrations.py | ||
test_moment.py | ||
test_record_func.py | ||
test_reflist_rel.py | ||
test_relabeling.py | ||
test_renames2.py | ||
test_renames.py | ||
test_side_effects.py | ||
test_summary2.py | ||
test_summary.py | ||
test_table_actions.py | ||
test_table_data_set.py | ||
test_temp_rowids.py | ||
test_textbuilder.py | ||
test_treeview.py | ||
test_twowaymap.py | ||
test_types.py | ||
test_undo.py | ||
test_useractions.py | ||
testsamples.py | ||
testscript.json | ||
testutil.py | ||
textbuilder.py | ||
treeview.py | ||
twowaymap.py | ||
tzdata.data | ||
useractions.py | ||
usercode.py | ||
usertypes.py |