claude 7fecaf491a compile: allow python package install for all users who can access the project ...

Previously userCanInstallPython used ignorePublicAccess: true, which
blocked token-link users (not-yet-joined) and logged-in readers of public
projects from installing packages. This caused Quarto presentations with
Python cells to fail for shared read-only users even when the required
packages were already listed in requirements.vrf.

The security model is: what gets installed is fully controlled by
requirements.vrf, which is only writable by members with write access.
There is therefore no security reason to block other readers from
triggering installation of already-approved packages.

Drop ignorePublicAccess so all users with any privilege level (direct,
token-based, or public-project) can trigger the venv install.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-06-10 08:20:46 +00:00

..

src

compile: allow python package install for all users who can access the project

2026-06-10 08:20:46 +00:00

templates

Add a Typst compiler alongside Quarto and LaTeX

2026-06-01 12:56:30 +00:00

views

Merge upstream Overleaf up to PR #34297 (68 commits)

2026-06-06 13:39:32 +00:00