Project

General

Profile

Actions

Defect #15664

closed

Unable to upload attachments without add_issues, edit_issues or add_issue_notes permission

Added by Pascal Jungblut over 10 years ago. Updated about 10 years ago.

Status:
Closed
Priority:
Normal
Category:
Permissions and roles
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Fixed
Affected version:

Description

Users with the manage_files permission are currently able to call FilesController#new and FilesController#create. However, uploading files requires permission to call AttachmentsController#upload. If a user has none of the permissions add_issues, edit_issues or add_issue_notes, they cannot upload files in the files tab.

Proposed solution: allow users with the manage_files permission to call AttachmentsController#upload.


Files

Actions

Also available in: Atom PDF