ElkArte Community

Project Support => Support => Topic started by: Jorin on July 13, 2015, 05:30:05 am

Title: Permissions of attachments
Post by: Jorin on July 13, 2015, 05:30:05 am
Hm, it seems I have a problem. I have guests allowed to see attachments. I activated that in the group permissions settings.

But: A guest sees an attachment only as long as it is no image! Images are not shown to guestst, PHP files are.  :o
Title: Re: Permissions of attachments
Post by: emanuele on July 13, 2015, 07:30:07 am
Test with an attachment.
And a big one.
And a php file.

hmm... on this forum is just set for guests to have the "view attachments" permission, nothing else as far as I can see.
It should be tested with a newly installed one, in the case it's a problem with the installer.
Title: Re: Permissions of attachments
Post by: Jorin on July 13, 2015, 07:45:53 am
I have the problem at http://support.elkarte-hilfe.de. I "updated" it by overwriting all 1.0.3 files with the new 1.0.4 files.  :-[

Do you need links to posts with attachments and an admin account to test it?
Title: Re: Permissions of attachments
Post by: emanuele on July 13, 2015, 08:03:12 am
The message would help, yes. :D
Title: Re: Permissions of attachments
Post by: Jorin on July 13, 2015, 08:46:43 am
Message with attachments *.png, invisible for guests:

http://support.elkarte-hilfe.de/index.php/topic,48.0.html

Message with attachment *.php, visible for guests:

http://support.elkarte-hilfe.de/index.php/topic,131.0.html
Title: Re: Permissions of attachments
Post by: emanuele on July 13, 2015, 03:07:42 pm
O_o

That's fun.
Can you attach an image to http://support.elkarte-hilfe.de/index.php/topic,131.0.html ?
Title: Re: Permissions of attachments
Post by: emanuele on July 14, 2015, 06:43:23 pm
The problem is not the fact it is an image or not, but the board.
You probably have two different permission profiles for the two boards (admin > members > permissions > board permissions), with one (the default likely) guest are allowed to see attachments, with the other guests are not allowed to see attachments.
So, from the "board permissions" page, click on the profile next to the "themes" board (under the column "permission profile") and check the guests permissions. ;)