Alex Hall 225a76c9cb (core) Don't throw error in onRecord(s) for insufficient access for includeColumns ... Summary: This removes checking for full access in `onRecord/onRecords` when `includeColumns` is a non-default value. The check had two problems: 1. It relied on the access level being present in the URL query parameters, which doesn't work if the page has redirected. See the discussion in https://grist.slack.com/archives/C0234CPPXPA/p1702576602615509. There seems to be no way to reliably and synchronously check the access level. 2. Calling `onRecords` before `ready` and forgetting to handle an error from the access check meant that `ready` wouldn't be called, so Grist couldn't request the correct access level from the user. I made this mistake and it seems like a nasty footgun. Ultimately this has no effect on security, as an error will still be raised, but in a place where the widget developer can't catch it. They'll still see an error message in the console, and they can still check the access level reliably using `onOptions`, so I think this is OK. Test Plan: Updated nbrowser test Reviewers: georgegevoian, paulfitz Reviewed By: georgegevoian, paulfitz Differential Revision: https://phab.getgrist.com/D4145		2023-12-30 10:16:40 +02:00
..
docs	(core) Allow adding rows to widgets filtered by a link using a formula column	2023-12-18 20:28:41 +02:00
export-csv	(core) Fix imports into reference columns, and support two ways to import Numeric as a reference.	2023-05-02 10:28:14 -04:00
export-xlsx	(core) For exporting XLSX, do it memory-efficiently in a worker thread.	2023-06-01 12:06:48 -04:00
plugins	(core) move some untagged assets served on plugin port	2023-11-14 15:58:00 -05:00
sites	(core) Don't throw error in onRecord(s) for insufficient access for includeColumns	2023-12-30 10:16:40 +02:00
uploads	(core) Set DateTime timezone during xlsx import	2023-05-24 11:39:49 -04:00