fix: implement more fine grained permission checks - Githubissues

FriendsOfFlarum / upload

The file upload extension with insane intelligence for your Flarum forum.

https://discuss.flarum.org/d/4154

MIT License

177 stars 96 forks source link

fix: implement more fine grained permission checks #416

Open DavideIadeluca opened 2 weeks ago

DavideIadeluca commented 2 weeks ago

Fixes https://github.com/FriendsOfFlarum/upload/issues/393

Changes proposed in this pull request:

Introduce new dedicated permissions for hiding
Introduces new permissions checks for deleting

Reviewers should focus on: No security vulnerabilities are introduced in DeleteFileHandler & FilePolicy

Screenshot

Confirmed

[ ] Frontend changes: tested on a local Flarum installation.
[ ] Backend changes: tests are green (run composer test).

Required changes:

[ ] Related Flarum core extension PR's: (Omit this section if irrelevant)