fix(targets): ask whether a table is readable as a query, not with an untyped input #69

Merged

james.maes merged 1 commits from fix/target-read-asked-as-query into develop

2026-11-12 17:20:44 +00:00

Author	SHA1	Message	Date
james.maesandClaude Fable 5.2	70f6184a7a	fix(targets): ask whether a table is readable as a query, not with an untyped input maven / build (push) Successful in 8m41s Details build / maven (push) Successful in 8m46s Details TargetResolver.canReadTable asked PermissionsHelper.hasTablePermission with a bare AbstractActionInput. Core hands a table's custom permission checker the action input and not the permission asked, so a checker that tells a read from a write by the input's type (a query, a get or a count reads; anything else is refused) refused the question. For such a table every recents and favorites call answered "Not found" for people the checker lets read it: the UI sends POST /recents on every list and record screen, so each of them showed "Resource not found POST /qqq/v1/qbit/collaboration/recents (HTTP 404)". The read is now asked with a QueryInput for the table, the read it stands for; ParentRecordAccess already asks with a GetInput. Who may read a table does not change: the checker still decides, and a person it refuses is still answered "Not found" (RecentsServiceTest .tableWithAnInputTypedPermissionCheckerIsATarget, which failed before with QNotFoundException on the first call). Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>	2026-11-12 10:53:22 -06:00

Author

SHA1

Message

Date

james.maesandClaude Fable 5.2

70f6184a7a

fix(targets): ask whether a table is readable as a query, not with an untyped input

maven / build (push) Successful in 8m41s

Details

build / maven (push) Successful in 8m46s

Details

TargetResolver.canReadTable asked PermissionsHelper.hasTablePermission with a
bare AbstractActionInput. Core hands a table's custom permission checker the
action input and not the permission asked, so a checker that tells a read
from a write by the input's type (a query, a get or a count reads; anything
else is refused) refused the question. For such a table every recents and
favorites call answered "Not found" for people the checker lets read it:
the UI sends POST /recents on every list and record screen, so each of them
showed "Resource not found POST /qqq/v1/qbit/collaboration/recents (HTTP
404)".

The read is now asked with a QueryInput for the table, the read it stands
for; ParentRecordAccess already asks with a GetInput. Who may read a table
does not change: the checker still decides, and a person it refuses is
still answered "Not found" (RecentsServiceTest
.tableWithAnInputTypedPermissionCheckerIsATarget, which failed before with
QNotFoundException on the first call).

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>

2026-11-12 10:53:22 -06:00