directus/v6-archive

Privilege Option not working as intended

开放

#16 创建于 2018年10月25日

 (0 条评论) (0 个反应) (0 位负责人)JavaScript (4 个派生)auto 404
4. MinorInterfacebughelp wantedv6

仓库指标

星标
 (2 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

From directus created by neocafe : directus/directus#1977

Version Info

  • Directus version and branch: Latest Version
  • PHP version: 7.2
  • MySQL version: 5.10
  • Web server: Apache
  • OS name and version: Ubuntu 16.04

Expected Behavior

When setting the privilege to view only, can view the entries but cannot modify any data which includes files also.

Actual Behavior

Not seeing the already uploaded file but can see only an upload option.

Steps to Reproduce

  1. Add a new user group that can only view data
  2. Assign user to a table that has some file(s) in it
  3. try to login as the user and navigate to it.

Schema Dump, Logs, or Screenshots

access after_login

UPDATE

So, After running some tests I was able to have the files listed instead of getting a file upload button, but still I can remove the image ( won't get updated but still a non-privileged user can see a form )

The problem is that I will have to grant permission to the directus_files table to the user, now the user can view all the files I've uploaded on to the server.

贡献者指南