Files
gristlabs_grist-core/app/common
Paul Fitzpatrick ea71312d0e (core) deal with write access for attachments
Summary:
Attachments are a special case for granular access control. A user is now allowed to read a given attachment if they have read access to a cell containing its id. So when a user writes to a cell in an attachment column, it is important that they can only write the ids of cells to which they have access. This diff allows a user to add an attachment id in a cell if:

  * The user already has access to that a attachment via some existing cell, or
  * The user recently updated the attachment, or
  * The attachment change is from an undo/redo of a previous action attributed to that user

Test Plan: Updated tests

Reviewers: georgegevoian, dsagal

Reviewed By: georgegevoian, dsagal

Differential Revision: https://phab.getgrist.com/D3681
2022-11-15 09:52:32 -05:00
..
2022-02-19 09:46:49 +00:00
2021-09-16 10:06:04 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2022-02-19 09:46:49 +00:00
2022-01-13 11:10:17 +01:00
2020-07-21 20:39:10 -04:00
2022-10-17 13:38:21 +02:00
2022-05-09 21:44:57 +02:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2022-10-17 13:38:21 +02:00
2022-10-17 09:51:19 +02:00
2022-08-25 12:38:36 -07:00
2022-06-27 16:10:10 -04:00
2022-07-04 10:42:40 -04:00
2020-07-21 20:39:10 -04:00
2022-07-04 10:42:40 -04:00
2020-07-21 20:39:10 -04:00
2022-02-19 09:46:49 +00:00
2022-10-17 13:38:21 +02:00
2020-07-21 20:39:10 -04:00
2022-02-19 09:46:49 +00:00
2022-09-30 09:11:46 -07:00
2022-03-12 14:34:46 -08:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-09-29 18:57:56 -04:00
2022-10-17 13:38:21 +02:00
2021-07-20 15:17:03 +02:00