Add write permission to objects only if necessary #893
Labels
question
scope: permissions
stale
For marking issues as stale. Labeled issues will be closed soon if label is not removed.
Currently, when an object is edited, the
write
permission is given to the creator/editor.This way, there's always someone with
write
permission.Problem, revoking permission on children is hard (#144).
One idea could be to add the
write
permission only if the user has nowrite
permission on the parent.Examples:
write
on bucket → create sub collection → no write on sub collectionwrite
on bucket → update sub collection → no write on sub collectionread
andcollection:create
on bucket → create collection → write added on collectionread
andrecord:create
on collection → create record → write added on recordPermissions specified via settings should be taken into account with this approach. Related #892
Careful with was done in #837
The text was updated successfully, but these errors were encountered: