Commit Graph

5 Commits

Author SHA1 Message Date
NMerz
7cb9639f9a Refine delete access
The requestor's access cannot be removed until after permissions are checked. Note, if the user does have permissions, they are remove along with all other users below these changes.
2020-11-14 15:17:56 -05:00
NMerz
b478ace552 Update delete to use delete permission
Previously used list creator as filter
2020-11-14 15:02:04 -05:00
NMerz
954b52dc0a Stricter access checking
Properly restrict access to list actions to only authorized users.
2020-11-14 14:29:48 -05:00
NMerz
7412915034 Allow non-owner semi-delete
Non-owners should be able to remove only their own access to a list
2020-11-01 21:48:05 -05:00
NMerz
8233a989ef ListDELETE lambda
List deletion now working
Integration tested independently.

Still needs tests and user deletion should now use this.
2020-10-31 14:54:42 -04:00