backdrop / backdrop-issues

Issue tracker for Backdrop core.
144 stars 40 forks source link

[UX] Propose granting the "View own files" permission when the "Add and upload new files" permission is granted #6011

Open klonos opened 1 year ago

klonos commented 1 year ago

When you grant the "Access administration bar" permission to a role, a popup dialog suggests that the "Use the administration pages" permission should be granted to the same role as well:

image

Also allow Authenticated role the "Use the administration pages" permission? This is usually required to display any pages within the administration bar.

We should be doing the same with the "View own files" and "Add and upload new files" permissions, because:

  1. Create a new user, and give them the default "Editor" role
  2. Give the Editor role the "Add and upload new files" and "Access the manage files overview" permissions
  3. Log into the site using the new user account
  4. Head to admin/content/files and click the "Add file" button
  5. Upload a file and save it: image

    πŸ‘ŽπŸΌ πŸ‘ŽπŸΌ πŸ‘ŽπŸΌ

  6. Back to the site as an admin/user1, also add the "View own files" permission to the Editor role
  7. Back to the site as the editor user, refresh the page -> you can now see the file you uploaded without any "access denied" errors πŸ‘πŸΌ

If that permission was suggested to be added when the site admin was initially configuring permissions, then there wouldn't need to be all that fuss πŸ˜‰

klonos commented 1 year ago

Noting that there's also the "Manage or replace any file" permission, that has Allow managing of files from the files overview page. as its description. Wondering if the file overview page is the only way to perform these actions?;