mirror of
https://github.com/yu-i-i/overleaf-cep.git
synced 2026-11-12 21:23:45 +01:00
* track-changes: enforce write and review permissions on review actions - Toggling track changes and accepting changes need write access - Resolving, reopening and deleting a thread use ensureUserCanDeleteOrResolveThread - Deleting a reply needs write or review access, and reviewers may only delete their own replies * track-changes: leave the reviewer own-reply check out of deleteMessage - Deleting a reply is limited by the route only, so reviewers can still delete any reply