Paul Fitzpatrick 42c3568835 (core) be stricter when replacing documents in the presence of granular access rules ... Summary: The /replace endpoint was built with home-level access control in mind. Updates needed: * Only an owner can now replace a document. Only owners are permitted to change granular access rules, and a document replacement could change granular access rules. * For the document being substituted in: the user must have complete access to view all material within it. Test Plan: extended test Reviewers: georgegevoian, dsagal Reviewed By: georgegevoian, dsagal Differential Revision: https://phab.getgrist.com/D3694		2022-11-09 14:14:09 -05:00
..
Authorizer.ts	(core) Faster builds all around.	2022-07-04 10:42:40 -04:00
DocApi.ts	(core) be stricter when replacing documents in the presence of granular access rules	2022-11-09 14:14:09 -05:00