Vote #74697
完了Unable to upload attachments without add_issues, edit_issues or add_issue_notes permission
開始日:
2022/05/09
期日:
進捗率:
0%
予定工数:
Redmineorg_URL:
category_id:
17
version_id:
78
issue_org_id:
15664
author_id:
91531
assigned_to_id:
1
comments:
2
status_id:
5
tracker_id:
1
plus1:
0
affected_version:
closed_on:
affected_version_id:
説明
Users with the @manage_files@ permission are currently able to call @FilesController#new@ and @FilesController#create@. However, uploading files requires permission to call @AttachmentsController#upload@. If a user has none of the permissions @add_issues@, @edit_issues@ or @add_issue_notes@, they cannot upload files in the files tab.
Proposed solution: allow users with the @manage_files@ permission to call @AttachmentsController#upload@.
journals
Confirmed and fixed in r12652 including for other actions (documents, wiki...).
Thanks for pointing this out.
--------------------------------------------------------------------------------
Merged.
--------------------------------------------------------------------------------
いいね!0