gristlabs_grist-core/app
Paul Fitzpatrick 7b7b26c983 (core) limit access to list of snapshots for documents with granular access
Summary:
Snapshots can now only be listed for users with non-nuanced access
(no access rules, or owners on docs with rules). If a snapshot URL
leaks, or is shared by a user who can list snapshots, that URL
behaves as before -- it gives access to the snapshot according
to access rules in that snapshot.

Test Plan: added test

Reviewers: georgegevoian, dsagal

Reviewed By: georgegevoian, dsagal

Subscribers: jarek

Differential Revision: https://phab.getgrist.com/D3698
2022-11-15 11:58:44 -05:00
..
client (core) limit access to list of snapshots for documents with granular access 2022-11-15 11:58:44 -05:00
common (core) deal with write access for attachments 2022-11-15 09:52:32 -05:00
gen-server (core) Tweak autocomplete to only suggest team members 2022-10-18 08:08:05 -07:00
plugin Use relative imports only in plugin folder (#328) 2022-10-26 10:41:38 -04:00
server (core) limit access to list of snapshots for documents with granular access 2022-11-15 11:58:44 -05:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00