search

agentejo / cockpit

Add content management functionality to any site - plug & play / headless / api-first CMS
http://getcockpit.com
MIT License
5.39k stars 523 forks source link

Can I global disable the finder? #1490

Open freedy82 opened 2 years ago

freedy82 commented 2 years ago

The finder can do many action to server. even the file was not in the cockpit folder.. It was some risk. I try use below

groups: admin: $admin: true cockpit: backend: true finder: false

it was not work, once give $admin is true, seem it was allow us the finder.

freedy82 commented 2 years ago

Finally i use finder.path to set the admin finder to upload folder.. but seem it was need full path from document root?