gristlabs / grist-core

Grist is the evolution of spreadsheets.
https://www.getgrist.com/
Apache License 2.0
7.04k stars 311 forks source link

Disable actions (buttons or input fields) when the user does not have permission to perform them #1186

Open JoelPagniez opened 1 month ago

JoelPagniez commented 1 month ago

Describe the problem to be solved

Context:

As a user, my action permissions are defined in the access rules. While some data is hidden based on my permissions, the same does not apply to action buttons or input fields. If an action cannot be performed and a message informs me that I do not have the rights to do so, it is still possible to click the button or modify an input field. Being able to click the button or modify a cell implies that the action will be executed. Moreover, users might not notice the error message because it is not very noticeable.

Observed Cases:

Describe the solution you would like

Do not display (or grey out) action buttons and prevent input in cells when it is not relevant to the user's profile.