gristlabs_grist-core/app
Paul Fitzpatrick bd762628e4 (core) confirm owner's right to download snapshots
Summary:
All users are treated as viewers for snapshot documents, since they
cannot reasonably be edited. This is a bit dubious and confusing now
that granular access rules exist. More urgently, owners of the trunk
document may be locked out of downloading a snapshot, and so also
locked out of replacing the trunk with a snapshot. This diff
explicitly gives an owner of a trunk document the right to download
its snapshots.

Test Plan: updated a snapshots test to something that fails without this diff

Reviewers: dsagal, georgegevoian

Reviewed By: dsagal, georgegevoian

Subscribers: jarek, dsagal

Differential Revision: https://phab.getgrist.com/D3721
2022-12-05 09:01:45 -05:00
..
client (core) Fix problem with localStorage in some cross-origin embed situations 2022-11-30 23:52:50 -05:00
common (core) lock down modification of the _grist_Attachments table 2022-11-22 11:30:54 -05:00
gen-server (core) Adding DELETE /api/docs/webhooks/queue endpoint to clear the queue 2022-12-01 12:23:19 +01:00
plugin Use relative imports only in plugin folder (#328) 2022-10-26 10:41:38 -04:00
server (core) confirm owner's right to download snapshots 2022-12-05 09:01:45 -05:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00