Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limiting creation of too much data for invitees #155

Open
joepio opened this issue Feb 15, 2023 · 0 comments
Open

Limiting creation of too much data for invitees #155

joepio opened this issue Feb 15, 2023 · 0 comments

Comments

@joepio
Copy link
Member

joepio commented Feb 15, 2023

Consider the following:

  • User A invites B to append a resource somewhere (e.g. add one comment in a chat)
  • B gives themselves write rights in the resource they append
  • B can now, in theory, create an infinitely large tree of resources under this comment, completely unrelated to the root item.

User A should have some tools to prevent this. I'm not quite sure how this might work.

  • If we constrain append right to only go one level deep, users can't do things like add an attachment to their comment.

Ideas are welcome!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant