SparkDevNetwork / Rock

An open source CMS, Relationship Management System (RMS) and Church Management System (ChMS) all rolled into one.
http://www.rockrms.com
579 stars 352 forks source link

403 Error on Document Upload #929

Closed bwitting closed 8 years ago

bwitting commented 9 years ago

On McKinley 3.0/3.1:

When uploading a document as a user with any role besides Rock Administrator, I get a 403 error:

2015-04-07 13_14_37-sarah witting _ rock rms

Here's the edit permissions for that attribute:

2015-04-07 13_16_13-person attributes _ rock rms

This is happening on any attributes that use a document upload, not just the one I picutred. (for example, this is happening to Background Check documents even if the person is in the Safety and Security Role)

MikeDPeterson commented 9 years ago

Could you look at Home > General Settings > File Types, and see what the EDIT security is for the File Type for that document? Note that Uploading requires EDIT security even though "Require View Security" is false.

bwitting commented 9 years ago

Thanks Mike, that was it. Only the Administrator Role had edit permissions on those file types. I gave other roles edit permissions and it is working as expected.

nairdo commented 9 years ago

Before we close this we need to consider whether or not we need a data migration to "resolve" this for everyone too.

bwitting commented 9 years ago

@nairdo I think this changed with the Rock 3.0 update. I think we may still be having some permissions trouble on file types (see #932)

arranf commented 8 years ago

Is definitely fixed as of 1.5.2