Files
gristlabs_grist-core/app/server/lib
Paul Fitzpatrick d5a7fb23fe (core) apply SchemaEdit flag to metadata changes in general
Summary:
A user without SchemaEdit permission was able to reorder pages, since
this changes _grist_Pages, and that table was left under control of
regular access rules.  This diff tightens things up, to require
SchemaEdit for all metadata edits.  The one remaining exception is
_grist_Attachments, which needs some reworking to play well with
granular access.

Test Plan: extended test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D3025
2021-09-16 13:36:20 -04:00
..
2021-09-16 09:15:54 -07:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2021-09-16 10:06:04 -04:00
2021-09-16 10:06:04 -04:00
2021-09-16 10:06:04 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00
2020-10-30 13:52:46 -04:00
2020-07-21 20:39:10 -04:00
2020-07-21 20:39:10 -04:00