Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

3.0.0-beta.2: Strange permission issue related to adding attachments #1580

Open
adigitalife opened this issue Sep 18, 2019 · 0 comments

Comments

@adigitalife
Copy link

commented Sep 18, 2019

Here's the scenario:

  • New users are automatically added to the "Contributors" group
  • The Contributors group has permission "Right to add attachments"
  • New user A is added.
  • User A is able to add attachments (i.e. the option is available in the "Metadata" tab)
  • User A is added to the "Editors" group.
  • The Editors group has many more permissions, including "Right to add attachments".
  • User A is now no longer able to add attachments (i.e. the option is gone from the "Metadata" tab).
  • User A is removed from the Contributors group.
  • User A can now add attachments again.
  • User A is added back to the Contributors group.
  • Again, user A can't add attachments
  • "Right to add attachments" is removed from the Contributors group.
  • User A can now add attachments again.

So it seems that:

  1. If a user belongs to more than one group and more than one of those groups has the permission "Right to add attachments" then the effect is that the user can't actually add any attachments.
  2. If the user belongs to more than one group but only one of those groups has the permission "Right to add attachments" then the user is able to add attachments.
@thorsten thorsten self-assigned this Sep 18, 2019
@thorsten thorsten added the Bug label Sep 18, 2019
@thorsten thorsten added this to the 3.0 milestone Sep 18, 2019
@thorsten thorsten added this to To Do in 3.0.0-beta.3 via automation Sep 18, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
3.0.0-beta.3
  
To Do
2 participants
You can’t perform that action at this time.