gristlabs_grist-core/app/server
Paul Fitzpatrick 42c3568835 (core) be stricter when replacing documents in the presence of granular access rules
Summary:
The /replace endpoint was built with home-level access control in mind. Updates needed:
  * Only an owner can now replace a document. Only owners are permitted to change granular access rules, and a document replacement could change granular access rules.
  * For the document being substituted in: the user must have complete access to view all material within it.

Test Plan: extended test

Reviewers: georgegevoian, dsagal

Reviewed By: georgegevoian, dsagal

Differential Revision: https://phab.getgrist.com/D3694
2022-11-09 14:14:09 -05:00
..
declarations
lib (core) be stricter when replacing documents in the presence of granular access rules 2022-11-09 14:14:09 -05:00
utils
companion.ts (core) show package.json version when hovering on Grist icon in grist-core 2022-10-12 16:02:01 -04:00
declarations.d.ts
devServerMain.ts
generateCheckpoint.ts
generateInitialDocSql.ts
localization.ts Split client and server translations, organize by filename 2022-10-13 12:04:29 +02:00
mergedServerMain.ts
tsconfig.json