Following
📌
Security: Set Instance access handler
Active
where InstanceAccessControlHandler checks
The first checks (about the current profile) is not enough, we need to also check each ApiController endpoint according to the island activated in the profile.
We don't do checks for "safe" endpoints:
We do checks for unsafe endpoints:
BuilderPanel or LayersPanel islandBuilderPanel or LayersPanel islandBuilderPanel or LayersPanel island is activatedMenu island is activateddisplay_builder.api_duplicate available only if Menu island is activateddisplay_builder.api_delete available only if MenuDelete island is activateddisplay_builder.api_save_preset available only if MenuPreset island is activateddisplay_builder.api_third_party_settings_update only if UiSkinsPanel, UiStylesPanel or VisibilityConditionsPanel. Do we need to be more precise and check each panel differently?isplay_builder.api_undo available only if HistoryButtons island is activateddisplay_builder.api_redo available only if HistoryButtons island is activateddisplay_builder.api_save available only if StateButtons island is activateddisplay_builder.api_restore available only if StateButtons island is activateddisplay_builder.api_revert available only if StateButtons island is activateddisplay_builder.api_clear available only if HistoryButtons island is activated with clear button activateddisplay_builder.api_sse available only if Collaboration island is activatedDo we need to add a method to IslandInterface? in order to get the list of endpoints allowed by each island.
Then, we can loop on activated islands and build the union of endpoints allowed by all activated islands.
Active
1.0
Main / Misc.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
No activities found.