Actions
Defect #15664
closedUnable to upload attachments without add_issues, edit_issues or add_issue_notes permission
Status:
Closed
Priority:
Normal
Assignee:
Category:
Permissions and roles
Target version:
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Affected version:
Description
Users with the manage_files
permission are currently able to call FilesController#new
and FilesController#create
. However, uploading files requires permission to call AttachmentsController#upload
. If a user has none of the permissions add_issues
, edit_issues
or add_issue_notes
, they cannot upload files in the files tab.
Proposed solution: allow users with the manage_files
permission to call AttachmentsController#upload
.
Files
Actions