@nextlyhq/plugin-form-builder 0.0.2-alpha.71 → 0.0.2-alpha.72

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.js CHANGED
@@ -69,9 +69,9 @@ function applyRedirectPattern(pattern, document) {
69
69
  * the role screen grants it: `read-form-submissions` to read submissions,
70
70
  * `update-forms` to edit a form.
71
71
  *
72
- * A collection's rule is the whole answer for a signed-in user, so "signed in"
73
- * here would admit every staff member whatever their role holds, and a role
74
- * name would refuse a custom role that holds the permission. The rule is given
72
+ * The grant is checked before a collection's rule, and the rule only narrows
73
+ * it, so this check repeats the gate's and keeps the default plain; a role
74
+ * name here would refuse a custom role that holds the permission. The rule is given
75
75
  * the caller's permissions as the role screen spells them, `<action>-<slug>`,
76
76
  * for a session and an API key alike, and a visitor holds none. `collection` is the slug the host installed
77
77
  * the collection under, so a renamed collection is judged by its own