pad.pub0.org/doc/api
pcworld 3c71e8983b Fix read only pad access with authentication
Before this commit, webaccess.checkAccess saved the authorization in
user.padAuthorizations[padId] with padId being the read-only pad ID,
however later stages, e.g. in PadMessageHandler, use the real pad ID for
access checks. This led to authorization being denied.

This commit fixes it by only storing and comparing the real pad IDs and
not read-only pad IDs.

This fixes test case "authn user readonly pad -> 200, ok" in
src/tests/backend/specs/socketio.js.
2021-04-12 22:51:06 -04:00
..
api.md
changeset_library.md DOCS: Add basic styles for tables and resources section to Changeset docs - https://github.com/citizenos/citizenos-fe/issues/535 2021-04-06 21:42:01 +02:00
editbar.md Fix typo 2017-03-11 22:09:49 -05:00
editorInfo.md Spelling fixes 2017-03-11 21:38:50 -05:00
embed_parameters.md Feature: Scroll to Line number based on Hash IE http://foo.com/p/bar#L10 will scroll to line 10. (#4554) 2020-12-26 22:05:08 +01:00
hooks_client-side.md chat: Allow `chatNewMessage` hook to modify more values 2021-04-11 06:20:29 +02:00
hooks_overview.md hooks: Rewrite `callAll` and `aCallAll` for consistency 2020-10-24 16:08:50 +01:00
hooks_server-side.md Fix read only pad access with authentication 2021-04-12 22:51:06 -04:00
http_api.md api: drop JSONP (#4835) 2021-02-22 09:10:02 +00:00
pluginfw.md docs: Wrap long lines 2020-11-13 20:30:27 +00:00
toolbar.md formatting: bulk remove trailing whitespaces 2019-10-20 02:09:22 +02:00