Paul Fitzpatrick d5a7fb23fe (core) apply SchemaEdit flag to metadata changes in general ...

Summary:
A user without SchemaEdit permission was able to reorder pages, since
this changes _grist_Pages, and that table was left under control of
regular access rules.  This diff tightens things up, to require
SchemaEdit for all metadata edits.  The one remaining exception is
_grist_Attachments, which needs some reworking to play well with
granular access.

Test Plan: extended test

Reviewers: dsagal

Reviewed By: dsagal

Differential Revision: https://phab.getgrist.com/D3025

2021-09-16 13:36:20 -04:00

..

ACLFormula.ts

…

ActionHistory.ts

…

ActionHistoryImpl.ts

(core) Log the time taken by decodeActionFromRow() operations.

2021-08-20 11:28:33 -04:00

ActionSummary.ts

…

ActiveDoc.ts

(core) Enable incremental imports

2021-09-16 09:15:54 -07:00

ActiveDocImport.ts

(core) Enable incremental imports

2021-09-16 09:15:54 -07:00

AppEndpoint.ts

…

Authorizer.ts

…

BrowserSession.ts

…

checksumFile.ts

…

Client.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

Comm.js

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

dbUtils.ts

…

DocApi.ts

(core) add a cli tool for deleting sites

2021-09-10 11:02:26 -04:00

DocClients.ts

…

DocManager.ts

…

DocPluginData.ts

…

DocPluginManager.ts

…

DocSession.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

DocSnapshots.ts

…

DocStorage.ts

…

DocStorageManager.ts

…

docUtils.d.ts

…

docUtils.js

…

DocWorker.ts

(core) Update export CSV and Excel endpoints

2021-08-31 10:47:24 -07:00

DocWorkerMap.ts

…

ExcelFormatter.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

ExpandedQuery.ts

…

Export.ts

(core) Relocate export urls to /download/

2021-09-02 09:36:33 -07:00

ExportCSV.ts

(core) Relocate export urls to /download/

2021-09-02 09:36:33 -07:00

ExportXLSX.ts

(core) Relocate export urls to /download/

2021-09-02 09:36:33 -07:00

expressWrap.ts

…

ExternalStorage.ts

…

extractOrg.ts

…

FileParserElement.ts

…

filterUtils.ts

…

FlexServer.ts

(core) add tests for site deletion

2021-09-14 10:03:18 -04:00

GoogleAuth.ts

…

GoogleExport.ts

…

GoogleImport.ts

…

GranularAccess.ts

(core) apply SchemaEdit flag to metadata changes in general

2021-09-16 13:36:20 -04:00

GristServer.ts

(core) add tests for site deletion

2021-09-14 10:03:18 -04:00

gristSessions.ts

…

guessExt.ts

…

HashUtil.ts

…

HostedMetadataManager.ts

…

HostedStorageManager.ts

…

IBilling.ts

…

IChecksumStore.ts

…

ICreate.ts

…

IDocStorageManager.ts

…

idUtils.ts

…

IElectionStore.ts

…

INotifier.ts

…

ISandbox.ts

(core) add experimental support for python3 in staging

2021-08-26 09:39:26 -04:00

IShell.ts

…

ITestingHooks-ti.ts

…

ITestingHooks.ts

…

log.ts

…

manifest.ts

…

MinimalLogin.ts

…

NSandbox.ts

(core) add experimental support for python3 in staging

2021-08-26 09:39:26 -04:00

OnDemandActions.ts

…

PermissionInfo.ts

…

Permit.ts

…

places.ts

…

PluginEndpoint.ts

…

PluginManager.ts

…

reportTimeTaken.ts

(core) Log the time taken by decodeActionFromRow() operations.

2021-08-20 11:28:33 -04:00

requestUtils.ts

…

RowAccess.ts

…

SafePythonComponent.ts

…

SamlConfig.ts

…

sandboxUtil.js

…

sendAppPage.ts

(core) add a python3 button

2021-09-16 10:06:04 -04:00

ServerColumnGetters.ts

…

ServerLocale.ts

(core) Simple localization support and currency selector.

2021-08-26 13:36:49 -07:00

serverUtils.ts

(core) add a python3 button

2021-09-16 10:06:04 -04:00

Sessions.ts

…

Sharing.ts

(core) add a python3 button

2021-09-16 10:06:04 -04:00

shortDesc.ts

…

shutdown.js

…

SQLiteDB.ts

…

TagChecker.ts

…

TestingHooks.ts

…

Throttle.ts

…

TimeQuery.ts

…

UnsafeNodeComponent.ts

…

uploads.ts

…

WorkCoordinator.ts

…