Files
overleaf-cep/services/web/modules
Musicminion 6c4829eea4 Track changes: fix permissions (#271)
* track-changes: enforce write and review permissions on review actions

 - Toggling track changes and accepting changes need write access
 - Resolving, reopening and deleting a thread use ensureUserCanDeleteOrResolveThread
 - Deleting a reply needs write or review access, and reviewers may only delete their own replies

* track-changes: leave the reviewer own-reply check out of deleteMessage

 - Deleting a reply is limited by the route only, so reviewers can still delete any reply
2026-11-04 18:28:56 +01:00
..
2026-09-27 18:11:28 +02:00
2026-11-04 17:51:41 +01:00
2026-09-27 18:11:28 +02:00
2026-09-27 18:11:28 +02:00