grist-core
grist-core copied to clipboard
Columns protected by access rules can be deleted by any user.
Current behavior
I have a crowd sourced table and one of the columns needs to be read only, which I managed to set-up fine. The issue is, while public contributors can't delete the contents of the cells in that column, they can still delete the whole column and there doesn't appear to be a way to prevent that.
I need the protected column to be safe from deletion as it contains moderator verified links. Additionally, if a public user deletes the column, they can't undo that action. Here is the spreadsheet I'm working in.
Steps to reproduce
-
Setup access rules for a column as follows:
-
Using the following public access link:
Open the link in a separate browser and click the following button to delete a protected column
-
after doing so, the document undo button will not work
Describe the expected behavior
I expected that denying edit permission would naturally also deny deletion.
However this option can be added. In the access rules there is only a RU (Read | Update) option for a column. If there was also a Delete permission that would be intuitive.
Also I have an idea to make column access rules UI&UX much easier.
For logged in Owners, there could be toggles for these permissions right in the column settings sidebar:
Where have you encountered this bug?
- [X] On docs.getgrist.com