Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add write permission to objects only if necessary #893

Open
leplatrem opened this issue Oct 28, 2016 · 0 comments
Open

Add write permission to objects only if necessary #893

leplatrem opened this issue Oct 28, 2016 · 0 comments
Labels
question scope: permissions stale For marking issues as stale. Labeled issues will be closed soon if label is not removed.

Comments

@leplatrem
Copy link
Contributor

leplatrem commented Oct 28, 2016

Currently, when an object is edited, the write permission is given to the creator/editor.

This way, there's always someone with write permission.

Problem, revoking permission on children is hard (#144).

One idea could be to add the write permission only if the user has no write permission on the parent.

Examples:

  • write on bucket → create sub collection → no write on sub collection
  • write on bucket → update sub collection → no write on sub collection
  • read and collection:create on bucket → create collection → write added on collection
  • read and record:create on collection → create record → write added on record

Permissions specified via settings should be taken into account with this approach. Related #892

Careful with was done in #837

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question scope: permissions stale For marking issues as stale. Labeled issues will be closed soon if label is not removed.
Projects
None yet
Development

No branches or pull requests

2 participants