Opened 4 years ago

Closed 4 years ago

#2046 closed defect (fixed)

The file upload function has incorrect permission check

Reported by: Nicklas Nordborg Owned by: everyone
Priority: minor Milestone: BASE 3.10
Component: web Version:
Keywords: Cc:

Description

It checks for WRITE permission on the directory but according to the BASE documentation and the implementation in the BASE core USE permission should be enough to be able to create files in a directory.

This only affects file upload from the web client GUI. Creating a file reference to an URL works, and plug-ins can also create files in the directory. The workaround is to give the user WRITE permission to the directory.

Change History (1)

comment:1 Changed 4 years ago by Nicklas Nordborg

Resolution: fixed
Status: newclosed

(In [7242]) Fixes #2046: The file upload function has incorrect permission check

Note: See TracTickets for help on using tickets.