Require collection manage permissions to export

2026-06-13 11:25:03 +03:00 · 2025-04-12 13:42:14 -04:00
1 changed files with 2 additions and 11 deletions
@@ -2,7 +2,7 @@ import invariant from "invariant";
 import filter from "lodash/filter";
 import { CollectionPermission } from "@shared/types";
 import { Collection, User, Team } from "@server/models";
-import { allow, can } from "./cancan";
+import { allow } from "./cancan";
 import { and, isTeamAdmin, isTeamModel, isTeamMutable, or } from "./utils";

 allow(User, "createCollection", Team, (actor, team) =>
@@ -67,15 +67,6 @@ allow(
  }
 );

-allow(User, "export", Collection, (actor, collection) =>
-  and(
-    //
-    can(actor, "read", collection),
-    !actor.isViewer,
-    !actor.isGuest
-  )
-);
-
 allow(User, "share", Collection, (user, collection) => {
  if (
    !collection ||
@@ -161,7 +152,7 @@ allow(
  }
 );

-allow(User, ["update", "archive"], Collection, (user, collection) =>
+allow(User, ["update", "export", "archive"], Collection, (user, collection) =>
  and(
    !!collection,
    !!collection?.isActive,