gristlabs_grist-core/app/server/lib
Paul Fitzpatrick d5a7fb23fe (core) apply SchemaEdit flag to metadata changes in general
Summary:
A user without SchemaEdit permission was able to reorder pages, since
this changes _grist_Pages, and that table was left under control of
regular access rules.  This diff tightens things up, to require
SchemaEdit for all metadata edits.  The one remaining exception is
_grist_Attachments, which needs some reworking to play well with
granular access.

Test Plan: extended test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D3025
2021-09-16 13:36:20 -04:00
..
ACLFormula.ts
ActionHistory.ts
ActionHistoryImpl.ts (core) Log the time taken by decodeActionFromRow() operations. 2021-08-20 11:28:33 -04:00
ActionSummary.ts
ActiveDoc.ts (core) Enable incremental imports 2021-09-16 09:15:54 -07:00
ActiveDocImport.ts (core) Enable incremental imports 2021-09-16 09:15:54 -07:00
AppEndpoint.ts (core) Adding import from google drive to the home screen 2021-08-05 20:46:11 +02:00
Authorizer.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
BrowserSession.ts (core) revive saml support and test against Auth0 2021-08-16 17:36:09 -04:00
checksumFile.ts
Client.ts (core) Simple localization support and currency selector. 2021-08-26 13:36:49 -07:00
Comm.js (core) Simple localization support and currency selector. 2021-08-26 13:36:49 -07:00
dbUtils.ts
DocApi.ts (core) add a cli tool for deleting sites 2021-09-10 11:02:26 -04:00
DocClients.ts
DocManager.ts (core) Adding import from google drive to the home screen 2021-08-05 20:46:11 +02:00
DocPluginData.ts
DocPluginManager.ts (core) Move file import plugins into core/sandbox/grist 2021-08-09 18:37:14 +02:00
DocSession.ts (core) Simple localization support and currency selector. 2021-08-26 13:36:49 -07:00
DocSnapshots.ts
DocStorage.ts (core) Barely working reference lists in frontend 2021-07-23 18:41:44 +02:00
DocStorageManager.ts (core) uncheck FullCopy special when copying/forking a document 2021-04-29 08:56:54 -04:00
docUtils.d.ts
docUtils.js
DocWorker.ts (core) Update export CSV and Excel endpoints 2021-08-31 10:47:24 -07:00
DocWorkerMap.ts (core) revive saml support and test against Auth0 2021-08-16 17:36:09 -04:00
ExcelFormatter.ts (core) Simple localization support and currency selector. 2021-08-26 13:36:49 -07:00
ExpandedQuery.ts (core) Linking summary tables grouped by list columns 2021-08-10 20:41:24 +02:00
Export.ts (core) Relocate export urls to /download/ 2021-09-02 09:36:33 -07:00
ExportCSV.ts (core) Relocate export urls to /download/ 2021-09-02 09:36:33 -07:00
ExportXLSX.ts (core) Relocate export urls to /download/ 2021-09-02 09:36:33 -07:00
expressWrap.ts
ExternalStorage.ts (core) Add rules to eslint to better match our coding conventions. 2021-05-24 12:56:18 -04:00
extractOrg.ts (core) Refactoring google drive plugin 2021-07-14 09:52:04 +02:00
FileParserElement.ts
filterUtils.ts (core) uncheck FullCopy special when copying/forking a document 2021-04-29 08:56:54 -04:00
FlexServer.ts (core) add tests for site deletion 2021-09-14 10:03:18 -04:00
GoogleAuth.ts (core) support python3 in grist-core, and running engine via docker and/or gvisor 2021-07-28 09:02:32 -04:00
GoogleExport.ts (core) support python3 in grist-core, and running engine via docker and/or gvisor 2021-07-28 09:02:32 -04:00
GoogleImport.ts (core) Adding google drive plugin as a fallback for url plugin 2021-08-04 17:59:13 +02:00
GranularAccess.ts (core) apply SchemaEdit flag to metadata changes in general 2021-09-16 13:36:20 -04:00
GristServer.ts (core) add tests for site deletion 2021-09-14 10:03:18 -04:00
gristSessions.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
guessExt.ts
HashUtil.ts
HostedMetadataManager.ts
HostedStorageManager.ts (core) Add rules to eslint to better match our coding conventions. 2021-05-24 12:56:18 -04:00
IBilling.ts
IChecksumStore.ts
ICreate.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
IDocStorageManager.ts (core) uncheck FullCopy special when copying/forking a document 2021-04-29 08:56:54 -04:00
idUtils.ts
IElectionStore.ts
INotifier.ts
ISandbox.ts (core) add experimental support for python3 in staging 2021-08-26 09:39:26 -04:00
IShell.ts
ITestingHooks-ti.ts (core) Remove a bunch of dead code 2021-07-01 18:38:21 +02:00
ITestingHooks.ts (core) Remove a bunch of dead code 2021-07-01 18:38:21 +02:00
log.ts
manifest.ts
MinimalLogin.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
NSandbox.ts (core) add experimental support for python3 in staging 2021-08-26 09:39:26 -04:00
OnDemandActions.ts
PermissionInfo.ts (core) Add 'user' variable to trigger formulas 2021-07-15 15:18:32 -07:00
Permit.ts (core) revive saml support and test against Auth0 2021-08-16 17:36:09 -04:00
places.ts
PluginEndpoint.ts
PluginManager.ts (core) Add rules to eslint to better match our coding conventions. 2021-05-24 12:56:18 -04:00
reportTimeTaken.ts (core) Log the time taken by decodeActionFromRow() operations. 2021-08-20 11:28:33 -04:00
requestUtils.ts (core) support python3 in grist-core, and running engine via docker and/or gvisor 2021-07-28 09:02:32 -04:00
RowAccess.ts (core) Add rules to eslint to better match our coding conventions. 2021-05-24 12:56:18 -04:00
SafePythonComponent.ts (core) Move file import plugins into core/sandbox/grist 2021-08-09 18:37:14 +02:00
SamlConfig.ts (core) lightly freshen the core readme, mentioning roadmap and forums etc. 2021-08-17 23:51:58 -04:00
sandboxUtil.js
sendAppPage.ts (core) add a python3 button 2021-09-16 10:06:04 -04:00
ServerColumnGetters.ts
ServerLocale.ts (core) Simple localization support and currency selector. 2021-08-26 13:36:49 -07:00
serverUtils.ts (core) add a python3 button 2021-09-16 10:06:04 -04:00
Sessions.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
Sharing.ts (core) add a python3 button 2021-09-16 10:06:04 -04:00
shortDesc.ts
shutdown.js
SQLiteDB.ts
TagChecker.ts
TestingHooks.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
Throttle.ts
TimeQuery.ts
UnsafeNodeComponent.ts
uploads.ts (core) Adding google drive plugin as a fallback for url plugin 2021-08-04 17:59:13 +02:00
WorkCoordinator.ts