gristlabs_grist-core/app/server
Paul Fitzpatrick f53ab2cb30 (core) forbids edits when "view as" user is a viewer and access rules are permissive
Summary:
Currently, if access rules are set to allow edits unconditionally,
and an owner does "View As" a user who is a viewer only, they will
be allowed to make edits.  This catches that condition and adds a
test.

Test Plan: added test

Reviewers: georgegevoian

Reviewed By: georgegevoian

Differential Revision: https://phab.getgrist.com/D2991
2021-08-20 16:04:28 -04:00
..
lib (core) forbids edits when "view as" user is a viewer and access rules are permissive 2021-08-20 16:04:28 -04:00
declarations.d.ts (core) start applying defenses for untrusted document uploads 2021-07-14 18:34:27 -04:00
devServerMain.ts (core) Adding google drive plugin as a fallback for url plugin 2021-08-04 17:59:13 +02:00
mergedServerMain.ts (core) clean up a collection of small problems affecting grist-core 2021-08-17 21:44:50 -04:00
serverMethods.ts (core) support python3 in grist-core, and running engine via docker and/or gvisor 2021-07-28 09:02:32 -04:00
tsconfig.json (core) move home server into core 2020-07-21 20:39:10 -04:00