graasp / graasp/graasp-api

Item copy should check member permissions

Open
#1,159 0 comments 0 reactions 0 assignees View on GitHub
bug :beetle: security
Dominant language
TypeScript
Stars
7
Forks
5
PR merge metrics
No merged PRs in 30d

Description

The item copy should behave differently depending on the member permission on the item under copy.

If the member has only read access to the item under copy (because it is copied from the library for example), the copy should **not** include hidden items as this breaks the guaranties we put on hidden items.

Hidden items should only be included if the member that makes the copy has a sufficient membership on the item.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.