Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
I want to disallow users with webform creation permission to create webform "File" field.
The reason I want to do this is because I found that some of my users created web forms to collect information from visitors, and they include file uploading fields. However these files uploaded are placed inside the Drupal Public directory, which can be downloaded by the public if they discover their paths. Unlike other fields type, which are only accessible by certain roles with permission. This may causes information leakage.
Comments
Comment #1
metakel CreditAttribution: metakel commentedI have just found how to disable this:
Home » Administration » Configuration » Content authoring » Webform settings