Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

File::canView() doesn’t take session grants into consideration #440

Open
kinglozzer opened this issue Mar 15, 2021 · 0 comments
Open

File::canView() doesn’t take session grants into consideration #440

kinglozzer opened this issue Mar 15, 2021 · 0 comments

Comments

@kinglozzer
Copy link
Member

This is more of a query than a bug report, but if a user is granted permission to view a file via the session grants functionality, canView() still returns false. Should we ensure canView() returns true in this situation, as the user can access the underlying file?

My specific use case is users uploading to a protected directory. We grant them access to the specific file they’ve uploaded via session grants, but not other files. FileUploadReceiver checks canView(), which will return false. We can achieve the above suggestion with an extension, but it struck me as odd behaviour

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants