Search for a command to run...
Articles tagged with #saas
If any signed-in user can redeem an invite token, a leaked link is all it takes for a stranger to join the workspace. A pasted Slack message or a forwarded email is enough. On accept, check that the s
Some editors store the share list inside each document snapshot. That makes "restore version" easy to build: copy the old snapshot over the current one. It also copies the old share list. Dana shares
Most apps build overnight digests by joining a user's watched or subscribed rows and dumping titles into an email. The job often runs as a system account and skips the same read check the in-app list
Most share endpoints check one thing: is this user allowed to share the document? If yes, they write whatever role the request asks for onto the invitee. Dan is a viewer on a contract. Viewers can sha
Most apps keep a "recently viewed" list as user_id + record_id rows, updated on every open. The sidebar endpoint often loads those IDs and returns titles without running the same read check the detail
Starred or favorited lists usually store record IDs (or a join table of user_id + record_id). The list endpoint often loads those IDs and returns the rows without running the same read check the detai
