Paul Fitzpatrick d0d3d3d0c9 (core) discount indirect changes for access control purposes ... Summary: This diff discounts indirect changes for access control purposes. A UserAction that updates a cell A, which in turn causes changes in other dependent cells, will be considered a change to cell A for access control purposes. The `engine.apply_user_actions` method now returns a `direct` array, with a boolean for each `stored` action, set to `true` if the action is attributed to the user or `false` if it is attributed to the engine. `GranularAccess` ignores actions attributed to the engine when checking for edit rights. Subtleties: * Removal of references to a removed row are considered direct changes. * Doesn't play well with undos as yet. An action that indirectly modifies a cell the user doesn't have rights to may succeed, but it will not be reversible. Test Plan: added tests, updated tests Reviewers: dsagal Reviewed By: dsagal Differential Revision: https://phab.getgrist.com/D2806		2021-05-12 11:26:21 -04:00
..
client	(core) Add ChoiceList type, cell widget, and editor widget.	2021-05-12 10:38:32 -04:00
common	(core) discount indirect changes for access control purposes	2021-05-12 11:26:21 -04:00
gen-server	(core) discount indirect changes for access control purposes	2021-05-12 11:26:21 -04:00
plugin	(core) Configure more comprehensive eslint rules for Typescript	2021-04-26 18:54:55 -04:00
server	(core) discount indirect changes for access control purposes	2021-05-12 11:26:21 -04:00
tsconfig.json	(core) move home server into core	2020-07-21 20:39:10 -04:00