directus/v6-archive

Privilege Option not working as intended

Ouverte

#16 ouverte le 25 oct. 2018

 (0 commentaire) (0 réaction) (0 personne assignée)JavaScript (4 forks)auto 404
4. MinorInterfacebughelp wantedv6

Métriques du dépôt

Stars
 (2 étoiles)
Métriques de merge PR
 (Métriques PR en attente)

Description

From directus created by neocafe : directus/directus#1977

Version Info

  • Directus version and branch: Latest Version
  • PHP version: 7.2
  • MySQL version: 5.10
  • Web server: Apache
  • OS name and version: Ubuntu 16.04

Expected Behavior

When setting the privilege to view only, can view the entries but cannot modify any data which includes files also.

Actual Behavior

Not seeing the already uploaded file but can see only an upload option.

Steps to Reproduce

  1. Add a new user group that can only view data
  2. Assign user to a table that has some file(s) in it
  3. try to login as the user and navigate to it.

Schema Dump, Logs, or Screenshots

access after_login

UPDATE

So, After running some tests I was able to have the files listed instead of getting a file upload button, but still I can remove the image ( won't get updated but still a non-privileged user can see a form )

The problem is that I will have to grant permission to the directus_files table to the user, now the user can view all the files I've uploaded on to the server.

Guide contributeur