search

ASWWU-Web / python_server

The API server for ASWWU Web. This project uses the Tornado web framework to serve and manage data across all ASWWU sites.
https://aswwu.com/server
4 stars 10 forks source link

allow additional permissions for froala upload endpoint. #125

Open ermsdev opened 4 years ago

ermsdev commented 4 years ago

This endpoint was recently secured (PR #116), but now appears to prevent most valid users from uploading cover images.

ermsdev commented 4 years ago

The endpoint allows users with role administrator and pages-admin. (people set as editors for a page can't currently upload images). I wonder if this is a caching issue, since one page that the owner was having trouble uploading an image for now has the image.

ermsdev commented 4 years ago

The person who was having trouble with this had an incorrect permission set for their user. Previously I thought they had correct permissions and still couldn't upload images, but that's not the case.

stacmi commented 4 years ago

going to look into this more per a conversation with stephen