Sterc / mediamanager

Enterprise grade media management in MODX
https://www.sterc.com/modx/extras/media-manager
7 stars 7 forks source link

Mediasource Permissions not being respected #46

Closed sonicpunk closed 2 years ago

sonicpunk commented 2 years ago

Ver.0.2.9

Our test user is able to see all mediasources through the mediamanager, even though their usergroup should not be allowed access. The MediaManager dropdown interface shows all possible mediaManager mediasources.

The normal MODX Browser is correctly blocking permission.

The expected behaviour would be that in the MediaManager source dropdown, they would only see those mediasources that they have access to.

We also tried setting the usersetting as described in the readme, but saw no difference.

sonicpunk commented 2 years ago

Ok, I see that if the user has no permission, they can still view the contents of the MediaSource, but not edit or upload. That wasn't clear at first glance. I would still prefer it however that mediaSources that they do not have access to would not appear in the select list.