typst / webapp-issues

Issue tracker for Typst's web app.
https://typst.app
9 stars 0 forks source link

Members of team can change document ownership #357

Closed LowkeyCoding closed 1 month ago

LowkeyCoding commented 1 month ago

Description

When in a team, all users with the member role can change the owner of a document, this removes the access to it from the rest of the team. The behavior I would expect is that only the administrator would be able to do it.

Reproduction URL

No response

Browsers

Firefox

OS

No response

laurmaedje commented 1 month ago

In principle, this is working as intended. Team members can create, delete, and duplicate projects, which is in combination equivalent to being able to change the owner.

LowkeyCoding commented 1 month ago

It felt odd, but I can see the point that members are inherently trusted and, therefore, "hopefully" will not intentionally remove access from other members.