Files
gristlabs_grist-core/app/client/components
Alex Hall 225a76c9cb (core) Don't throw error in onRecord(s) for insufficient access for includeColumns
Summary:
This removes checking for full access in `onRecord/onRecords` when `includeColumns` is a non-default value. The check had two problems:

1. It relied on the access level being present in the URL query parameters, which doesn't work if the page has redirected. See the discussion in https://grist.slack.com/archives/C0234CPPXPA/p1702576602615509. There seems to be no way to reliably and synchronously check the access level.
2. Calling `onRecords` before `ready` and forgetting to handle an error from the access check meant that `ready` wouldn't be called, so Grist couldn't request the correct access level from the user. I made this mistake and it seems like a nasty footgun.

Ultimately this has no effect on security, as an error will still be raised, but in a place where the widget developer can't catch it. They'll still see an error message in the console, and they can still check the access level reliably using `onOptions`, so I think this is OK.

Test Plan: Updated nbrowser test

Reviewers: georgegevoian, paulfitz

Reviewed By: georgegevoian, paulfitz

Differential Revision: https://phab.getgrist.com/D4145
2023-12-30 10:16:40 +02:00
..
2023-12-20 13:23:12 +01:00
2020-10-02 13:24:21 -04:00
2020-10-02 13:24:21 -04:00
2020-10-02 13:24:21 -04:00
2020-10-02 13:24:21 -04:00
2023-04-12 01:58:48 -04:00
2020-10-02 13:24:21 -04:00
2023-06-02 17:59:22 +02:00
2023-09-25 18:48:18 -04:00
2023-11-21 16:49:41 -05:00
2023-04-20 12:20:03 -04:00
2020-10-02 13:24:21 -04:00
2020-10-02 13:24:21 -04:00
2023-12-20 13:23:12 +01:00
2023-01-19 09:46:59 +01:00
2023-03-02 11:22:49 +01:00
2020-10-02 13:24:21 -04:00
2023-09-22 03:51:58 -04:00
2023-08-04 14:59:55 +02:00
2023-04-12 01:58:48 -04:00
2023-11-19 20:12:37 -05:00
2023-11-21 16:49:41 -05:00
2023-11-19 20:12:37 -05:00
2023-11-19 20:12:37 -05:00
2020-10-02 13:24:21 -04:00
2023-08-29 09:19:52 +02:00
2023-11-19 20:12:37 -05:00
2023-12-20 13:23:12 +01:00
2020-10-02 13:24:21 -04:00