file permissions for attachment and WebFM Browser - please clarify
blogbold - December 4, 2008 - 15:38
| Project: | Web File Manager |
| Version: | 6.x-2.10-rc2 |
| Component: | User interface |
| Category: | support request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | by design |
Jump to:
Description
I believe these are 2 different categories of permissions:
1.) "Public download"
2.) "Role view/download", "Role attach", "Role full access"
Is it correct that "Public download" sets a site-readers permission on attachments to a node, while "Role..." sets permissions within the WebFM browser?
(If it is so, the combined list in the permissions-popup caused some confusion.)
Thank you in advance!
#1
The permissions ajax window (context menu) sets the access rights to a file within the webfm module browser UI. Attachments of files to nodes is always possible for the owner of the file, administrators and any non-admin user who can view the file via the browser AND the file has the "Role Attach" attribute checked. Once a file is attached the rights to accessing it is purely a node access issue - if a user can access a node that a particular file is attached to then he/she can download the file. The "Public download" right controls webfm_send links outside of attachments (ie:
<img src="/webfm_send/42" />in the body of a node). I know this scheme isn't perfect but I'm not changing it.#2
#3
Ah, now I understand, thanks!