Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Limiting creation of too much data for invitees #155

Open
joepio opened this issue Feb 15, 2023 · 0 comments
Open

Limiting creation of too much data for invitees #155

joepio opened this issue Feb 15, 2023 · 0 comments

Comments

@joepio
Copy link
Member

joepio commented Feb 15, 2023

Consider the following:

  • User A invites B to append a resource somewhere (e.g. add one comment in a chat)
  • B gives themselves write rights in the resource they append
  • B can now, in theory, create an infinitely large tree of resources under this comment, completely unrelated to the root item.

User A should have some tools to prevent this. I'm not quite sure how this might work.

  • If we constrain append right to only go one level deep, users can't do things like add an attachment to their comment.

Ideas are welcome!

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant