1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-24 15:52:41 +01:00
phorge-phorge/src/applications/herald
epriestley ee4bdb501b Make Herald transcripts policy-aware
Summary:
Ref T603. Herald transcripts potentially leak a bunch of content (task text, revision/commit content). Don't let users see them if they can't see the actual objects.

This is a little messy but ends up mostly reasonable-ish.

Test Plan:
  - Verified that transcripts for objects I couldn't see no longer appear in the list, and reject access.
  - Verified that transcripts for objects in applications I can't see reject access, albeit less gracefully.

Reviewers: btrahan

Reviewed By: btrahan

CC: aran

Maniphest Tasks: T603

Differential Revision: https://secure.phabricator.com/D7221
2013-10-04 15:17:18 -07:00
..
adapter Make Herald transcripts policy-aware 2013-10-04 15:17:18 -07:00
application Tighten up some policy interactions in Herald 2013-10-04 15:15:48 -07:00
config Remove HeraldActionConfig, HeraldFieldConfig 2013-08-07 18:04:37 -07:00
controller Make Herald transcripts policy-aware 2013-10-04 15:17:18 -07:00
engine Herald - make dry runs work for "apply once" rules after they have been applied 2013-09-13 11:38:49 -07:00
phid Policy - introduce parentQuery and pass around policy configuration from parent to child 2013-09-11 12:19:34 -07:00
query Make Herald transcripts policy-aware 2013-10-04 15:17:18 -07:00
storage Make Herald transcripts policy-aware 2013-10-04 15:17:18 -07:00
view Move PhabricatorObjectItem to PHUIObjectItem, add 'plain' setting for lists. 2013-09-09 14:14:34 -07:00