Skip to content

Limiting creation of too much data for invitees #155

Description

@joepio

Consider the following:

  • User A invites B to append a resource somewhere (e.g. add one comment in a chat)
  • B gives themselves write rights in the resource they append
  • B can now, in theory, create an infinitely large tree of resources under this comment, completely unrelated to the root item.

User A should have some tools to prevent this. I'm not quite sure how this might work.

  • If we constrain append right to only go one level deep, users can't do things like add an attachment to their comment.

Ideas are welcome!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions