Mohamed El Amine BOUKERFAandAnthony LC ca286b6de7 🐛(backend) prevent privileged users from requesting access ...

Privileged users of a document (owners and admins) should not be
allowed to create an access request on a document they already control.
Without aguardrail, they could inadvertently inflate the access
request queue with redundant entries.

More critically, if an owner submits an access request on their own
document, another admin could accept it and grant them a lower role
(e.g. reader), which would silently strip them of their ownership.

Signed-off-by: Mohamed El Amine BOUKERFA <boukerfa.ma@gmail.com>

2026-03-09 10:07:23 +01:00

..

__init__.py

🐛(back) fix ValidationError exception handler

2025-03-07 09:04:44 +01:00

fields.py

🚨(backend) fix linting issues after upgrading

2024-08-20 18:06:02 +02:00

filters.py

🚸(backend) sort user search results by proximity with the active user (#1802)

2026-02-11 18:51:45 +01:00

permissions.py

🔥(backend) remove all code related to template

2026-01-21 09:51:49 +01:00

serializers.py

✨(backend) use pydantic AI to manage vercel data stream protocol

2026-02-26 09:52:33 +01:00

throttling.py

🛂(backend) stop throttling collaboration servers

2025-12-16 14:13:30 +01:00

utils.py

✨(backend) add "tree" action on document API endpoint

2025-03-11 09:32:48 +01:00

viewsets.py

🐛(backend) prevent privileged users from requesting access

2026-03-09 10:07:23 +01:00