ENH Check canViewFile permissions before automatically grant access

silverstripe / silverstripe-assets

Silverstripe Assets component

BSD 3-Clause "New" or "Revised" License

9 stars 65 forks source link

ENH Check canViewFile permissions before automatically grant access #517

Closed sabina-talipova closed 1 year ago

sabina-talipova commented 1 year ago

Description

Add condition to check if user has access to view the file and only then give him a session grant access to the file.

Parent Issue

https://github.com/silverstripe/silverstripe-assets/issues/501

emteknetnz commented 1 year ago

@sabina-talipova Did you identify any content editing experiences that are likely to break because of this change?

sabina-talipova commented 1 year ago

@emteknetnz , I did a few tests in Page section, Submission section on UserFormPage and Files section. And I also tested DRAFT content on Published and Unpublished pages. I haven't found any problem with Content or UI. If user has "Access to Page section" he will have an access to the File.