Dont allow anon users to download or even see attachments

mimecorg / webissues

WebIssues team collaboration system.

https://webissues.mimec.org/

GNU Affero General Public License v3.0

59 stars 14 forks source link

Dont allow anon users to download or even see attachments #78

Open SofttouchCode opened 1 year ago

SofttouchCode commented 1 year ago

Currently, anon users can see issues, comments and attachments (and can download them). I believe, there should be a setting about what anon user can do, so we can prevent downloading attachments.

mimecorg commented 1 year ago

Anonymous users can only view issues, comments and attachments in public projects. Regular projects (which is the default setting for all projects) are not accessible to anonymous users.

SofttouchCode commented 1 year ago

Yes, but would it not make sense when anon user can only see things, but not download attachments? Sometimes, there is a project what should be visible to the public so they see the progress of something, but they still should not be allowed to download attachments, only after they have registered. Everything else it just great.