Closed manics closed 3 years ago
The latter scenario shouldn't be possible. If you are logged-in as a user who is not a member of the public group, you won't be able to access images that are in the public group.
The first scenario should be fixed by #415
Public user
Logged in user not in public group
The latter is arguably a bigger problem. There is no expectation of the public user being able to save, however a user who is logged in but in the wrong group might still expect the save to work.