Archives/gristlabs_grist-core
1
0
Fork 0
mirror of https://github.com/gristlabs/grist-core.git synced 2026-03-02 04:09:24 +00:00
Code Issues Projects Releases Wiki Activity
Files
b3a57e3b5c9158dc1b6d206a01f9663b4459c3d4
gristlabs_grist-core/app/server/lib
History
Paul Fitzpatrick 8f023a6446 (core) implement authorization via query parameter 
Summary:
This adds any parameters in a document url whose key ends in '_'
into a `user.Link` object available in access control formulas
and in setting up characteristic tables.

This allows, for example, sending links to a document that contain
a hard-to-guess token, and having that link grant access to a
controlled part of the document (invoices for a specific customer
for example).

A `user.Origin` field is also added, set during rest api calls,
but is only tested manually at this point.  It could be elaborated
for embedding use-cases.

Test Plan: added test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D2680
2020-12-09 09:48:06 -05:00
..
ACLFormula.ts
(core) Implement new representation of ACL rules.
2020-11-18 08:58:03 -05:00
ActionHistory.ts
(core) Store formula values in DB, and include them into .stored/.undo fields of actions.
2020-11-04 16:45:47 -05:00
ActionHistoryImpl.ts
(core) When parsing ActionHistory into ActionGroups, avoid keeping many large actions in memory.
2020-09-19 20:45:33 -04:00
ActionSummary.ts
(core) tolerate table renames when displaying differences
2020-11-12 10:55:15 -05:00
ActiveDoc.ts
(core) check row-level permissions on incoming actions
2020-12-07 16:59:28 -05:00
ActiveDocImport.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
AppEndpoint.ts
(core) back-end support for tables that are accessible only by owners
2020-09-14 18:05:27 -04:00
Authorizer.ts
(core) implement authorization via query parameter
2020-12-09 09:48:06 -05:00
BrowserSession.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
checksumFile.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
Client.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
Comm.js
(core) move home server into core
2020-07-21 20:39:10 -04:00
dbUtils.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
DocApi.ts
(core) Fix typings in DocApi causing a build failure in core.
2020-11-27 08:09:57 -05:00
DocClients.ts
(core) implement cleaner row-level access control for outgoing messages
2020-11-30 16:28:33 -05:00
DocManager.ts
(core) implement authorization via query parameter
2020-12-09 09:48:06 -05:00
DocPluginData.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
DocPluginManager.ts
(core) make user role available in ActiveDoc methods
2020-09-02 14:46:15 -04:00
DocSession.ts
(core) check row-level permissions on incoming actions
2020-12-07 16:59:28 -05:00
DocSnapshots.ts
(core) fix sync to s3 when doc is marked as dirty but proves to be clean
2020-11-10 08:12:31 -05:00
DocStorage.ts
(core) Perform migrations of Grist schema using only metadata tables when possible.
2020-11-11 19:21:40 -05:00
DocStorageManager.ts
(core) revamp snapshot inventory
2020-10-30 13:52:46 -04:00
docUtils.d.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
docUtils.js
(core) move home server into core
2020-07-21 20:39:10 -04:00
DocWorker.ts
(core) make user role available in ActiveDoc methods
2020-09-02 14:46:15 -04:00
DocWorkerMap.ts
(core) support GRIST_WORKER_GROUP to place worker into an exclusive group
2020-11-02 15:46:46 -05:00
ExpandedQuery.ts
(core) Store formula values in DB, and include them into .stored/.undo fields of actions.
2020-11-04 16:45:47 -05:00
expressWrap.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
ExternalStorage.ts
(core) fix sync to s3 when doc is marked as dirty but proves to be clean
2020-11-10 08:12:31 -05:00
extractOrg.ts
(core) add a deployment test for Import-from-URL, and fix underlying issue
2020-07-23 11:26:16 -04:00
FileParserElement.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
FlexServer.ts
(core) support GRIST_WORKER_GROUP to place worker into an exclusive group
2020-11-02 15:46:46 -05:00
GranularAccess.ts
(core) implement authorization via query parameter
2020-12-09 09:48:06 -05:00
GristServer.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
gristSessions.ts
(core) support GRIST_WORKER_GROUP to place worker into an exclusive group
2020-11-02 15:46:46 -05:00
guessExt.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
HashUtil.ts
(core) add more detail to /compare endpoint
2020-09-18 16:31:29 -04:00
HostedMetadataManager.ts
(core) revamp snapshot inventory
2020-10-30 13:52:46 -04:00
HostedStorageManager.ts
(core) fix sync to s3 when doc is marked as dirty but proves to be clean
2020-11-10 08:12:31 -05:00
IBilling.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
IChecksumStore.ts
(core) revamp snapshot inventory
2020-10-30 13:52:46 -04:00
ICreate.ts
(core) revamp snapshot inventory
2020-10-30 13:52:46 -04:00
IDocStorageManager.ts
(core) revamp snapshot inventory
2020-10-30 13:52:46 -04:00
idUtils.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
IElectionStore.ts
(core) move some material to core that slipped through in a rebase
2020-07-23 11:29:05 -04:00
IInstanceManager.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
ILoginSession.ts
(core) move client code to core
2020-10-02 13:24:21 -04:00
INotifier.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
ISandbox.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
IShell.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
ITestingHooks-ti.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
ITestingHooks.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
log.ts
(core) give instructions on using Grist with docker
2020-10-28 13:59:13 -04:00
manifest.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
NSandbox.ts
(core) move data engine code to core
2020-07-29 08:57:25 -04:00
OnDemandActions.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
Permit.ts
(core) move some material to core that slipped through in a rebase
2020-07-23 11:29:05 -04:00
places.ts
(core) fix docker packaging after core shuffle
2020-07-22 14:45:42 -04:00
PluginEndpoint.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
PluginManager.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
requestUtils.ts
(core) switch to newer download endpoint in client
2020-10-19 12:44:03 -04:00
RowAccess.ts
(core) Implement much of the general AccessRules UI.
2020-12-07 14:48:41 -05:00
SafePythonComponent.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
sandboxUtil.js
(core) move home server into core
2020-07-21 20:39:10 -04:00
sendAppPage.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
ServerColumnGetters.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
serverUtils.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
Sessions.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
Sharing.ts
(core) check row-level permissions on incoming actions
2020-12-07 16:59:28 -05:00
shortDesc.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
shutdown.js
(core) move home server into core
2020-07-21 20:39:10 -04:00
SQLiteDB.ts
(core) revamp snapshot inventory
2020-10-30 13:52:46 -04:00
TagChecker.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
TestingHooks.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
Throttle.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
TimeQuery.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
UnsafeNodeComponent.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00
uploads.ts
(core) mitigate csrf by requiring custom header for unsafe methods
2020-10-08 14:19:25 -04:00
WorkCoordinator.ts
(core) move home server into core
2020-07-21 20:39:10 -04:00