gristlabs_grist-core/app/server
Paul Fitzpatrick 7b7b26c983 (core) limit access to list of snapshots for documents with granular access
Summary:
Snapshots can now only be listed for users with non-nuanced access
(no access rules, or owners on docs with rules). If a snapshot URL
leaks, or is shared by a user who can list snapshots, that URL
behaves as before -- it gives access to the snapshot according
to access rules in that snapshot.

Test Plan: added test

Reviewers: georgegevoian, dsagal

Reviewed By: georgegevoian, dsagal

Subscribers: jarek

Differential Revision: https://phab.getgrist.com/D3698
2022-11-15 11:58:44 -05:00
..
declarations (core) disentangle some server tests, release to core, add GRIST_PROXY_AUTH_HEADER test 2022-03-24 15:11:32 -04:00
lib (core) limit access to list of snapshots for documents with granular access 2022-11-15 11:58:44 -05:00
utils (core) add a yarn run cli tool, and add a sqlite gristify option 2022-07-14 12:00:30 -04:00
companion.ts (core) show package.json version when hovering on Grist icon in grist-core 2022-10-12 16:02:01 -04:00
declarations.d.ts (core) Faster builds all around. 2022-07-04 10:42:40 -04:00
devServerMain.ts (core) Faster builds all around. 2022-07-04 10:42:40 -04:00
generateCheckpoint.ts (core) get all tests working under python3/gvisor 2021-10-18 17:44:15 -04:00
generateInitialDocSql.ts (core) get all tests working under python3/gvisor 2021-10-18 17:44:15 -04:00
localization.ts Split client and server translations, organize by filename 2022-10-13 12:04:29 +02:00
mergedServerMain.ts (core) dust off electron build a little bit 2022-07-29 11:19:26 -04:00
tsconfig.json (core) Simple localization support and currency selector. 2021-08-26 13:36:49 -07:00