agw/overleaf-cep
1
0
Fork 0
mirror of https://github.com/yu-i-i/overleaf-cep.git synced 2026-05-30 12:24:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1629 from sharelatex/sk-censor-token-prefix

Browse Source 
Censor `tokens.readAndWritePrefix` when building project model

GitOrigin-RevId: 0fe3fc2657aa191808ea282dfcd2ea5506e93fee
This commit is contained in:
Shane Kilkelly
2019-03-22 10:11:04 +00:00
committed by sharelatex
parent 49a5056e78
commit a5ad2e48d4
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
services/web/app/coffee/Features/TokenAccess/TokenAccessHandler.coffee
View File

@@ -134,6 +134,7 @@ module.exports = TokenAccessHandler =
return
if privilegeLevel != PrivilegeLevels.READ_AND_WRITE
project.tokens.readAndWrite = ''
project.tokens.readAndWritePrefix = ''
if privilegeLevel != PrivilegeLevels.READ_ONLY
project.tokens.readOnly = ''

3
services/web/test/unit/coffee/TokenAccess/TokenAccessHandlerTests.coffee
View File

@@ -480,11 +480,12 @@ describe "TokenAccessHandler", ->
describe 'protectTokens', ->
beforeEach ->
@project = {tokens: {readAndWrite: 'rw', readOnly: 'ro'}}
@project = {tokens: {readAndWrite: 'rw', readOnly: 'ro', readAndWritePrefix: 'pre'}}
it 'should hide write token from read-only user', ->
@TokenAccessHandler.protectTokens(@project, 'readOnly')
expect(@project.tokens.readAndWrite).to.equal ''
expect(@project.tokens.readAndWritePrefix).to.equal ''
expect(@project.tokens.readOnly).to.equal 'ro'
it 'should hide read token from read-write user', ->