jasonyates / netbox-documents

Plugin to manage site, circuit and device diagrams and documents in Netbox
Apache License 2.0
133 stars 20 forks source link

Media files for documents reachable unauthenticated #68

Open helheimcloud opened 4 weeks ago

helheimcloud commented 4 weeks ago

Hey,

the media files are, when the link is known, reachable unauthenticated. Im not sure if the design of the plugin/netbox media allows mitigating this.

Kind Regards, René

Andres1357 commented 2 weeks ago

I also found this issue today. Even the built-in image attachments have the same problem. Seems to happen on netbox v4.1.0 and above. See netbox change in 4.1.0: Enable plugin views to enforce LOGIN_REQUIRED selectively

I guess that means its up to the plugin devs to update to support this. I wish the default behavior was to mimic how it worked before.

Andres1357 commented 2 weeks ago

Since this documents plugin stores files in the media directory, I think this might be on the side of NetBox itself. I've created an issue there. Media files are reachable unauthenticated #17972