Add library safety check, use publicOnly ContentType when no user access

eluv-io / elv-fabric-browser

Eluvio Content Fabric Browser

MIT License

2 stars 1 forks source link

Add library safety check, use publicOnly ContentType when no user access #100

Closed elv-zenia closed 11 months ago

elv-zenia commented 11 months ago

When a user has access to an object through a group but no access to the library or content type, the Fabric Browser breaks in two ways:

The code is looking for a property on an object that is undefined (library)
client ContentType fails because the user doesn't have access to the content type

This adds a simple check for the library and checks the user's access rights to the content type. If they have no access, ContentType is called with the publicOnly flag.

elv-kevin commented 11 months ago

yeah this looks fine

permissions on types and libraries has always been an ugly problem