User Group Rights: Connect "File operation permissions" to "filemounts"

[madmaharaja]

Current State Currently, any file operation permissions a user receives always apply to all filemounts the respective user has been given access to. The larger an installation is and the more users and files a Contao installation has, the more likely it is though that certain users/user groups should have a wider range of file operation permissions for some files/folders while more restrictions might apply to other files/folders.

Example Scenario The following example is a scenario from our Contao installation (for a fairly large NGO):

• In this installation we operate about 80 different websites (there is one general website of the organization + each location has it's own website).
• Each of these websites/locations has their own subfolder in tl_files -- e.g. files/location1, files/location2, files/location3 etc.
• We have over 100 users who are in charge for the different sites or for sections of a website.
• Regarding the files in the folder of their location, the users have the permission to upload, edit and delete single files and empty folders.

The Issue: There is one general folder (e.g. files/stockphotos) with lots of stock photos that should be accessible for all users. However, the "ordinary" user should only be able to use the photos within content elements/news/events, but he should not be able to delete, upload or rename the files within this specific folder.

Pull Request It would be great if within one user group the "file operation permissions" would be directly connected to the "filemounts" so that permissions associated with certain folders should not generally apply but only to the filemounts defined in the respective user group. This way one could solve the issue by assigning one user to two different user groups with the following settings:

USER GROUP 1 Filemounts: files/location1 File operation permissions: upload, edit and delete single files and empty folders

USER GROUP 2 Filemounts: files/stockphotos File operation permissions: none

An alternative solution might be to be able to assign access rights to folders on the file manager level, similarly as one can do for pages where one can distinguish between different rights for an "owner" and a certain "group".

I found the description of the same issue here in German: https://community.contao.org/de/showthread.php?50564-Verschiedene-Rechte-auf-verschiedene-Verzeichnisse

[zodit]

Any news about this? I have exactly the same situation, I think this is a bug of Contao, the repository folder is having permissions that should not have, because USER GROUP 2 is taking the configuration from USER GROUP 1.