dh-remixer-sdk 0.0.45 → 0.0.46-13d9daa

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dh-remixer-sdk",
-  "version": "0.0.45",
+  "version": "0.0.46-13d9daa",
   "type": "module",
   "files": [
     "templates",

package/templates/base/remixer/auth.ts

@@ -63,8 +63,9 @@ export const auth = {
   /**
    * Whether the signed-in user is a site admin of this project (granted by email in the editor,
    * Users → Site admins). Site admins read every non-private record, add records to admin-only
-   * types and, from a later release, update and delete any record. Anonymous visitors are never
-   * site admins, so no request is made for them. A grant or revocation takes effect within a minute.
+   * types, update and delete any non-private record and change its owner fields; other signed-in
+   * users update and delete only the records they own. Anonymous visitors are never site admins, so
+   * no request is made for them. A grant or revocation takes effect within a minute.
    */
   async isSiteAdmin(): Promise<boolean> {
     const session = await getProjectSession();

package/templates/base/remixer/errors.ts

@@ -11,13 +11,19 @@ export class RemixerRuntimeError extends Error {
 }
 
 /**
- * Codes the runtime answers with a 403 when a data read or create is refused by the type's access
- * level (`entity_types.read_access` / `create_access`):
+ * Codes the runtime answers with a 403 when a data read or write is refused by the type's access
+ * level (`entity_types.read_access` / `create_access`) or its owner fields:
  * - `sign_in_required`: the type needs a signed-in website user (or the read touched fields that are
  *   not public); sign the visitor in and retry.
  * - `admin_required`: only a site admin may add records to this type.
- * - `data_access_denied`: the type is private to the editor; no site caller can read or change it.
- * They are never 401, so the anonymous-token retry does not run for them.
+ * - `data_access_denied`: the type is private to the editor, so no site caller can read or change it;
+ *   or an update by a caller who is not a site admin changes one of the type's owner fields ("Owner
+ *   fields can only be changed by a site admin"; sending an owner field with its stored value is fine).
+ * They are never 401, so the anonymous-token retry does not run for them. On every level but private
+ * an update or delete succeeds only for the record's owner (its `userId`, or a user whose id or
+ * confirmed email one of the type's owner fields holds) or a site admin, so a record created
+ * anonymously that no owner field ties to a user is changed only by a site admin; anyone else gets a
+ * 404 `entity_record_not_found`, which is not one of these codes.
  */
 export type RemixerAccessDenialCode = 'sign_in_required' | 'admin_required' | 'data_access_denied';