budibase
budibase copied to clipboard
Row action view security crud
Description
Allow CRUD for row action view security.
Is this the permissions stuff we were talking about this morning in standup? If so, is this still relevant or are we going to tie view action permissions to read permissions?
This is still required. Each row action will be created per table, but to trigger it from a view it will need to be explicitly toggled. My question during the standup was who can actually trigger it? In short, the flow will be as follows:
- A row action A is called via the view B
- First check: is row action A enabled for the view B (this is what this PR crud is about)
- Second check: does the user calling have enough permissions to trigger this action (how this is done is yet to be discussed and implement in a further PR)
Looks good - just need to update the API authorization middlewares for the builder only endpoints.
This is done in here: https://github.com/Budibase/budibase/pull/14448