directus/v6-archive

Privilege Option not working as intended

オープン

#16 opened on 2018/10/25

 (0 件のコメント) (0 件のリアクション) (0 人の担当者)JavaScript (4 件のフォーク)auto 404
4. MinorInterfacebughelp wantedv6

Repository metrics

Stars
 (2 個のスター)
PR merge metrics
 (PR metrics pending)

説明

From directus created by neocafe : directus/directus#1977

Version Info

  • Directus version and branch: Latest Version
  • PHP version: 7.2
  • MySQL version: 5.10
  • Web server: Apache
  • OS name and version: Ubuntu 16.04

Expected Behavior

When setting the privilege to view only, can view the entries but cannot modify any data which includes files also.

Actual Behavior

Not seeing the already uploaded file but can see only an upload option.

Steps to Reproduce

  1. Add a new user group that can only view data
  2. Assign user to a table that has some file(s) in it
  3. try to login as the user and navigate to it.

Schema Dump, Logs, or Screenshots

access after_login

UPDATE

So, After running some tests I was able to have the files listed instead of getting a file upload button, but still I can remove the image ( won't get updated but still a non-privileged user can see a form )

The problem is that I will have to grant permission to the directus_files table to the user, now the user can view all the files I've uploaded on to the server.

コントリビューターガイド