gristlabs_grist-core/static
Paul Fitzpatrick 7b7b26c983 (core) limit access to list of snapshots for documents with granular access
Summary:
Snapshots can now only be listed for users with non-nuanced access
(no access rules, or owners on docs with rules). If a snapshot URL
leaks, or is shared by a user who can list snapshots, that URL
behaves as before -- it gives access to the snapshot according
to access rules in that snapshot.

Test Plan: added test

Reviewers: georgegevoian, dsagal

Reviewed By: georgegevoian, dsagal

Subscribers: jarek

Differential Revision: https://phab.getgrist.com/D3698
2022-11-15 11:58:44 -05:00
..
icons (core) Add AddUser icon 2022-11-03 10:51:38 -04:00
img (core) Add dark mode to user preferences 2022-09-05 19:17:32 -07:00
locales (core) limit access to list of snapshots for documents with granular access 2022-11-15 11:58:44 -05:00
ui-icons (core) Add AddUser icon 2022-11-03 10:51:38 -04:00
account.html (core) i18 2022-09-29 18:02:09 +02:00
activation.html (core) i18 2022-09-29 18:02:09 +02:00
app.html (core) i18 2022-09-29 18:02:09 +02:00
custom-widget.html (core) fix browser check and favicon in grist-core 2022-01-05 18:15:05 -05:00
custom.css (core) Add config to include custom CSS 2022-05-12 11:13:52 -07:00
error.html (core) i18 2022-09-29 18:02:09 +02:00
hljs.default.css (core) move client code to core 2020-10-02 13:24:21 -04:00
index.html Initial config with a few files that build on client and server side. 2020-05-20 00:50:46 -04:00
message.html (core) Google auth endpoint has not responded with auth code 2021-07-21 20:18:04 +02:00