Currently, a user with the permission use workbench_media add form can access the path admin/workbench/media/add and can "upload" a file but the file will not actually be saved. In contrast, a user with the permission "create files" can add files at file/add but cannot visit admin/workbench/media/add.

I propose that accessing the paths defined in workbench_media_menu() require the same permissions as accessing the "sections" defined in hook_workbench_create_alter()

CommentFileSizeAuthor
#1 make-permissions-for-paths-and-sections-consistent-1922746-1.patch3.02 KBdevin carlson

Comments

devin carlson’s picture

devin carlson commented
Assigned: Unassigned » devin carlson
Status: Active » Needs review
StatusFileSize
new make-permissions-for-paths-and-sections-consistent-1922746-1.patch3.02 KB

A patch to accommodate the latest changes to File entity and make the permissions required for both paths and sections consistent.

Users will need to have pass file_entity_access() and have permission to use the Workbench Media add form in order to access the paths or the sections.