Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.I've noticed this issue in 5.x, and it seems not solved in 6.x.
- Create a custom content type
- Grant edit / create privileges to both anonymous and authenticated users
- Grant "view uploaded files" privileges on authenticated user and anonymous users
- Grant "upload files" permission only to authenticated user
As authenticated user, add a file to a custom content type you've created (I try with admin account before granting privileges) typing some text in the body (or type nothing).
Logout and, as anonymous user, type some text in the body (we have edit privileges on that content type). Save, and the files disappears from view and from node.
What's wrong?
Comments
Comment #1
NancyDruThis has to move to 7.x for any hope of getting fixed.
Comment #2
webchickUpload module has been removed from Drupal 7. Moving down to 6.x.
Comment #3
Greg Varga CreditAttribution: Greg Varga commentedSubscribing.
We also bumped into this issue. We got Editor, Publisher and Admin roles. Editors and Admins got the "upload files" permission but we forgot to assign this to the Publishers. After an Editor created a new node, attached 15-20 files using the upload module and saved the node, the Publisher went in and edited the node and published it (saved the node). All the attached files were gone.
This is unexpected and a serious bug. If a user who has no permission to upload files edits the node the attachments on the node shouldn't be deleted.
I guess this won't be fixed in D6 as the module is not in D7, but I thought I document this issue for further reference.
Gergely
Comment #4
NancyDruIt's sort of in D7, but it's called File and it's a field handler.