Paul Fitzpatrick d5a7fb23fe (core) apply SchemaEdit flag to metadata changes in general ...

Summary:
A user without SchemaEdit permission was able to reorder pages, since
this changes _grist_Pages, and that table was left under control of
regular access rules.  This diff tightens things up, to require
SchemaEdit for all metadata edits.  The one remaining exception is
_grist_Attachments, which needs some reworking to play well with
granular access.

Test Plan: extended test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D3025

2021-09-16 13:36:20 -04:00

..

ACLFormula.ts

…

ActionHistory.ts

…

ActionHistoryImpl.ts

(core) Log the time taken by decodeActionFromRow() operations.

2021-08-20 11:28:33 -04:00

ActionSummary.ts

…

ActiveDoc.ts

(core) Enable incremental imports

2021-09-16 09:15:54 -07:00

ActiveDocImport.ts

(core) Enable incremental imports

2021-09-16 09:15:54 -07:00

AppEndpoint.ts

(core) Adding import from google drive to the home screen

2021-08-05 20:46:11 +02:00

Authorizer.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

BrowserSession.ts

(core) revive saml support and test against Auth0

2021-08-16 17:36:09 -04:00

checksumFile.ts

…

Client.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

Comm.js

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

dbUtils.ts

…

DocApi.ts

(core) add a cli tool for deleting sites

2021-09-10 11:02:26 -04:00

DocClients.ts

…

DocManager.ts

(core) Adding import from google drive to the home screen

2021-08-05 20:46:11 +02:00

DocPluginData.ts

…

DocPluginManager.ts

(core) Move file import plugins into core/sandbox/grist

2021-08-09 18:37:14 +02:00

DocSession.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

DocSnapshots.ts

…

DocStorage.ts

(core) Barely working reference lists in frontend

2021-07-23 18:41:44 +02:00

DocStorageManager.ts

(core) uncheck FullCopy special when copying/forking a document

2021-04-29 08:56:54 -04:00

docUtils.d.ts

…

docUtils.js

…

DocWorker.ts

(core) Update export CSV and Excel endpoints

2021-08-31 10:47:24 -07:00

DocWorkerMap.ts

(core) revive saml support and test against Auth0

2021-08-16 17:36:09 -04:00

ExcelFormatter.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

ExpandedQuery.ts

(core) Linking summary tables grouped by list columns

2021-08-10 20:41:24 +02:00

Export.ts

(core) Relocate export urls to /download/

2021-09-02 09:36:33 -07:00

ExportCSV.ts

(core) Relocate export urls to /download/

2021-09-02 09:36:33 -07:00

ExportXLSX.ts

(core) Relocate export urls to /download/

2021-09-02 09:36:33 -07:00

expressWrap.ts

…

ExternalStorage.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

extractOrg.ts

(core) Refactoring google drive plugin

2021-07-14 09:52:04 +02:00

FileParserElement.ts

…

filterUtils.ts

(core) uncheck FullCopy special when copying/forking a document

2021-04-29 08:56:54 -04:00

FlexServer.ts

(core) add tests for site deletion

2021-09-14 10:03:18 -04:00

GoogleAuth.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

GoogleExport.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

GoogleImport.ts

(core) Adding google drive plugin as a fallback for url plugin

2021-08-04 17:59:13 +02:00

GranularAccess.ts

(core) apply SchemaEdit flag to metadata changes in general

2021-09-16 13:36:20 -04:00

GristServer.ts

(core) add tests for site deletion

2021-09-14 10:03:18 -04:00

gristSessions.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

guessExt.ts

…

HashUtil.ts

…

HostedMetadataManager.ts

…

HostedStorageManager.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

IBilling.ts

…

IChecksumStore.ts

…

ICreate.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

IDocStorageManager.ts

(core) uncheck FullCopy special when copying/forking a document

2021-04-29 08:56:54 -04:00

idUtils.ts

…

IElectionStore.ts

…

INotifier.ts

…

ISandbox.ts

(core) add experimental support for python3 in staging

2021-08-26 09:39:26 -04:00

IShell.ts

…

ITestingHooks-ti.ts

(core) Remove a bunch of dead code

2021-07-01 18:38:21 +02:00

ITestingHooks.ts

(core) Remove a bunch of dead code

2021-07-01 18:38:21 +02:00

log.ts

…

manifest.ts

…

MinimalLogin.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

NSandbox.ts

(core) add experimental support for python3 in staging

2021-08-26 09:39:26 -04:00

OnDemandActions.ts

…

PermissionInfo.ts

(core) Add 'user' variable to trigger formulas

2021-07-15 15:18:32 -07:00

Permit.ts

(core) revive saml support and test against Auth0

2021-08-16 17:36:09 -04:00

places.ts

…

PluginEndpoint.ts

…

PluginManager.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

reportTimeTaken.ts

(core) Log the time taken by decodeActionFromRow() operations.

2021-08-20 11:28:33 -04:00

requestUtils.ts

(core) support python3 in grist-core, and running engine via docker and/or gvisor

2021-07-28 09:02:32 -04:00

RowAccess.ts

(core) Add rules to eslint to better match our coding conventions.

2021-05-24 12:56:18 -04:00

SafePythonComponent.ts

(core) Move file import plugins into core/sandbox/grist

2021-08-09 18:37:14 +02:00

SamlConfig.ts

(core) lightly freshen the core readme, mentioning roadmap and forums etc.

2021-08-17 23:51:58 -04:00

sandboxUtil.js

…

sendAppPage.ts

(core) add a python3 button

2021-09-16 10:06:04 -04:00

ServerColumnGetters.ts

…

ServerLocale.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

serverUtils.ts

(core) add a python3 button

2021-09-16 10:06:04 -04:00

Sessions.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

Sharing.ts

(core) add a python3 button

2021-09-16 10:06:04 -04:00

shortDesc.ts

…

shutdown.js

…

SQLiteDB.ts

…

TagChecker.ts

…

TestingHooks.ts

(core) clean up a collection of small problems affecting grist-core

2021-08-17 21:44:50 -04:00

Throttle.ts

…

TimeQuery.ts

…

UnsafeNodeComponent.ts

…

uploads.ts

(core) Adding google drive plugin as a fallback for url plugin

2021-08-04 17:59:13 +02:00

WorkCoordinator.ts

…