ops design and app
add more comments feature, more tags feature, and other frontend updates
This commit is contained in:
@@ -133,7 +133,14 @@ A minimal-dependency, ultra-fast documentation platform that publishes markdown
|
||||
|
||||
**What's Next:**
|
||||
- Complete the independent penetration-test checklist during production hardening
|
||||
- Decide how deep per-document/per-collection permissions should go before collaboration features
|
||||
- Implement resource permissions for pages, folders, and collections:
|
||||
- Content is secure/private by default unless a user is granted access directly or through a folder/collection grant
|
||||
- Supported levels remain view, edit, and admin; commenting is available to editors and admins only
|
||||
- Global admins and resource admins can change resource permissions
|
||||
- Unauthorized pages disappear from navigation, search, and sync results
|
||||
- Most permissive matching grant wins, so shared folder/collection access can expose otherwise-default-private pages
|
||||
- API tokens and native sync clients inherit the owning user's effective resource permissions
|
||||
- Public UUID/hash-style sharing remains supported for explicitly shared/uploaded assets
|
||||
- Add optional multiple-passkey management and session refresh polish if real usage calls for it
|
||||
|
||||
---
|
||||
|
||||
Reference in New Issue
Block a user