gristlabs_grist-core/app
Paul Fitzpatrick d5a7fb23fe (core) apply SchemaEdit flag to metadata changes in general
Summary:
A user without SchemaEdit permission was able to reorder pages, since
this changes _grist_Pages, and that table was left under control of
regular access rules.  This diff tightens things up, to require
SchemaEdit for all metadata edits.  The one remaining exception is
_grist_Attachments, which needs some reworking to play well with
granular access.

Test Plan: extended test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D3025
2021-09-16 13:36:20 -04:00
..
client (core) Fix y-axis blinking in chart view configuration 2021-09-16 18:18:28 +02:00
common (core) Enable incremental imports 2021-09-16 09:15:54 -07:00
gen-server (core) add tests for site deletion 2021-09-14 10:03:18 -04:00
plugin (core) Suggest correct table when converting to RefList 2021-08-20 23:04:48 +02:00
server (core) apply SchemaEdit flag to metadata changes in general 2021-09-16 13:36:20 -04:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00