Paul Fitzpatrick 8f023a6446 (core) implement authorization via query parameter ...

Summary:
This adds any parameters in a document url whose key ends in '_'
into a `user.Link` object available in access control formulas
and in setting up characteristic tables.

This allows, for example, sending links to a document that contain
a hard-to-guess token, and having that link grant access to a
controlled part of the document (invoices for a specific customer
for example).

A `user.Origin` field is also added, set during rest api calls,
but is only tested manually at this point.  It could be elaborated
for embedding use-cases.

Test Plan: added test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D2680

2020-12-09 09:48:06 -05:00

..

client

(core) implement authorization via query parameter

2020-12-09 09:48:06 -05:00

common

(core) implement authorization via query parameter

2020-12-09 09:48:06 -05:00

gen-server

(core) distinguish open public documents from listing them

2020-11-27 09:56:25 -05:00

plugin

(core) hide long sequences of unchanged rows in diffs

2020-11-19 18:19:54 -05:00

server

(core) implement authorization via query parameter

2020-12-09 09:48:06 -05:00

tsconfig.json

(core) move home server into core

2020-07-21 20:39:10 -04:00