Jakub Zych 7b72bf4be4 fix(10.1): WR-05 drop widgets the admin may not run from the form schema ...

formSchema now filters type: widget fields by the action's permissions,
the same D-12 filtering listSchema applies to toolbarActions, so an admin
without the action permission no longer gets a button that always
answers 403, and the action name is not revealed. The filtered fields are
a new slice, so the cached schema is never modified.

2026-09-29 09:58:27 +02:00

24 KiB

Raw Blame History

View Raw