Read-only shares can no longer delete or rename files
- What was broken
- Deleting or renaming a file only checked that you could read its document. Someone given a read-only share could delete or rename the owner's files.
- What I changed
- Both actions now need write access to the document, like the other actions that change files.
- Why it matters
- Sharing a document to read stays read-only, and the owner's files stay safe.