Cordy/Cairn
2
1
Fork 0
Code Issues 20 Pull requests Projects Releases Packages Wiki Activity Actions

Locks: permission-aware Unlock in the row menu (#396) #399

Merged
Cordy merged 8 commits from lock-menu into main 2026-09-02 20:18:01 +00:00
Conversation 0 Commits 8 Files changed 3 +35 -5
Cordy commented 2026-09-02 20:17:49 +00:00
Owner
Copy link

Implements #396 (deferred L8 from #315).

  • Listings now carry spaceOwner once per response (resolved via the existing spaceOwnerCached, advisory only).
  • Client captures its own username at boot (meName from /api/v1/me; feat.admin already existed) and the current listing's space owner.
  • Row menu on a locked row is now honest: the holder gets Unlock; admins and the owning space owner get a danger-styled Break lock (distinct label, i18n ×4, so nobody breaks a colleague's lock thinking it was their own); everyone else gets no entry — the chip and tooltip already explain the state.
  • Folder locking (#395) is likewise only offered to the actual space owner now, instead of optimistically to every space member.
  • No server-side permission changes: the matrix shipped in #393 remains the enforcer and the 403 path the backstop.

Closes #396.

Implements #396 (deferred L8 from #315). - Listings now carry `spaceOwner` once per response (resolved via the existing `spaceOwnerCached`, advisory only). - Client captures its own username at boot (`meName` from `/api/v1/me`; `feat.admin` already existed) and the current listing's space owner. - Row menu on a locked row is now honest: the holder gets **Unlock**; admins and the owning space owner get a danger-styled **Break lock** (distinct label, i18n ×4, so nobody breaks a colleague's lock thinking it was their own); everyone else gets no entry — the chip and tooltip already explain the state. - Folder locking (#395) is likewise only offered to the actual space owner now, instead of optimistically to every space member. - No server-side permission changes: the matrix shipped in #393 remains the enforcer and the 403 path the backstop. Closes #396.
feat(web): permission-aware lock menu + listing spaceOwner (#396)
All checks were successful
ci / test-and-build (pull_request) Successful in 39s
Details
bedbaeebbb
Cordy merged commit 7ae97be642 into main 2026-09-02 20:18:01 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Cordy/Cairn#399
No description provided.
Delete branch "lock-menu"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?