Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
BC-5424 - persistent storage for tldraw #4685
BC-5424 - persistent storage for tldraw #4685
Changes from 21 commits
a40ee1b
4190ed4
16665ea
9844450
5ae793e
a52712c
5971daf
2727511
9fe419a
d6f7cf4
b1649b2
6bd3dc6
d112e77
31de79e
f5d4d63
5a79db3
1c61198
937d407
9906ee8
eccb43b
11ad9f3
d10a186
107de35
4fd2c1d
4c36cbf
e681fb7
9d0745e
cf34896
156e6b3
80a6900
57c51d5
465124d
31fd8cc
0d24bb5
File filter
Filter by extension
Conversations
Jump to
There are no files selected for viewing
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What is the default value of this boolean?
For me is this change unclear, can we speak about it?
With this line you create a exception for one element that invert the authorisation (logic/role), it look like the first step into the wrong direction.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The default should be false and only set the student to editors when accessing a drawing element.
Currently all students are readers. In the submission case we actually overrule the permission in the UC layer.
As this is a temporary solution until we have the proper authZ set in place.
schulcloud-server/apps/server/src/modules/board/uc/base.uc.ts
Line 45 in 9906ee8
I would be better to set exceptions outside this function like how the submission is handling it to keep the core code clean for now.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The default is false.
We want to store uploaded assets from tldraw in s3 storage - by default every authorized user is supposed to be able to upload to tldraw. There is already a logic in place to upload files to column board nodes. If requested board node is an instance of DrawingElement (which is Tldraw) we want to give student role access to upload.
The alternative I can think of is to create new authorizable service only for DrawingElements which would basically be a copy paste of board-do-authorizable.service with just this one line changed. We are open to any other suggestions.