Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[UX] Propose granting the "View own files" permission when the "Add and upload new files" permission is granted #6011

Open
klonos opened this issue Mar 1, 2023 · 1 comment
Assignees

Comments

@klonos
Copy link
Member

klonos commented Mar 1, 2023

When you grant the "Access administration bar" permission to a role, a popup dialog suggests that the "Use the administration pages" permission should be granted to the same role as well:

image

Also allow Authenticated role the "Use the administration pages" permission? This is usually required to display any pages within the administration bar.

We should be doing the same with the "View own files" and "Add and upload new files" permissions, because:

  1. Create a new user, and give them the default "Editor" role

  2. Give the Editor role the "Add and upload new files" and "Access the manage files overview" permissions

  3. Log into the site using the new user account

  4. Head to admin/content/files and click the "Add file" button

  5. Upload a file and save it:
    image

    👎🏼 👎🏼 👎🏼

  6. Back to the site as an admin/user1, also add the "View own files" permission to the Editor role

  7. Back to the site as the editor user, refresh the page -> you can now see the file you uploaded without any "access denied" errors 👍🏼

If that permission was suggested to be added when the site admin was initially configuring permissions, then there wouldn't need to be all that fuss 😉

@klonos klonos self-assigned this Mar 1, 2023
@klonos
Copy link
Member Author

klonos commented Mar 1, 2023

Noting that there's also the "Manage or replace any file" permission, that has Allow managing of files from the files overview page. as its description. Wondering if the file overview page is the only way to perform these actions?;

  • If that is the case, then perhaps we should also be suggesting to add the "Access the manage files overview" permissions when this is clicked.
  • If there's other ways to perform these actions, then this description should be tweaked or removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant