can delete files I shouldn't be able to delete

mksondej / mattermost-file-list

Adds a paged and searchable file list to each channel. The list is opened through a button in the top panel. Through the list you can obtain public or normal links to the files, open or delete them.

Apache License 2.0

76 stars 11 forks source link

can delete files I shouldn't be able to delete #39

Closed bbodenmiller closed 3 years ago

bbodenmiller commented 4 years ago

It appears I'm able to delete other peoples files. That doesn't sound like expected behavior.

mksondej commented 4 years ago

That depends. Are you a system or channel admin? Because if you can edit other people's messages you will also be able to do this through the plugin.

bbodenmiller commented 4 years ago

In this case I was running as team admin but my settings are set to not allow team admins to edit or delete others posts...