gristlabs_grist-core/app/client
Paul Fitzpatrick 7b7b26c983 (core) limit access to list of snapshots for documents with granular access
Summary:
Snapshots can now only be listed for users with non-nuanced access
(no access rules, or owners on docs with rules). If a snapshot URL
leaks, or is shared by a user who can list snapshots, that URL
behaves as before -- it gives access to the snapshot according
to access rules in that snapshot.

Test Plan: added test

Reviewers: georgegevoian, dsagal

Reviewed By: georgegevoian, dsagal

Subscribers: jarek

Differential Revision: https://phab.getgrist.com/D3698
2022-11-15 11:58:44 -05:00
..
aclui (core) Support for $ syntax in ACL rules 2022-11-09 16:33:11 +01:00
components (core) When a checkbox is clicked on a new record, set default values determined by linking 2022-11-10 14:34:40 -05:00
lib (core) Fixing scrolling for linked sections 2022-11-09 20:39:26 +01:00
models (core) When a checkbox is clicked on a new record, set default values determined by linking 2022-11-10 14:34:40 -05:00
ui (core) limit access to list of snapshots for documents with granular access 2022-11-15 11:58:44 -05:00
ui2018 (core) Don't override search on Code View and Access Rules pages. 2022-11-14 10:46:35 -05:00
widgets (core) deal with write access for attachments 2022-11-15 09:52:32 -05:00
accountMain.ts (core) Enable MFA configuration (and add SMS) 2022-01-19 13:55:54 -08:00
activationMain.ts (core) Add basic activation page to grist-ee 2022-08-23 10:30:52 -07:00
app.css (core) Add dark mode to user preferences 2022-09-05 19:17:32 -07:00
app.js (core) i18 2022-09-29 18:02:09 +02:00
billingMain.ts (core) Add basic activation page to grist-ee 2022-08-23 10:30:52 -07:00
browserCheck.ts (core) fix browser check and favicon in grist-core 2022-01-05 18:15:05 -05:00
declarations.d.ts (core) Changing shortcuts for adding and removing rows 2022-10-21 18:45:25 +02:00
errorMain.ts (core) Enable MFA configuration (and add SMS) 2022-01-19 13:55:54 -08:00
exposeModulesForTests.js (core) Some cleanup: remove old unused modules. 2020-11-20 11:23:20 -05:00
logo.css (core) Cleanup removing some old unused files, fixing logo.css, and removing #grist-app. 2020-10-09 17:04:09 -04:00
tsconfig.json (core) Migrate to SRP and add change password dialog 2022-03-16 21:35:06 -07:00