[MojoMojo] attachment permissions

Marcus Ramberg marcus at nordaaker.com
Wed Nov 25 17:51:45 GMT 2009

Uhm, I do not believe this is intentional behaviour. I'd accept a
patch to make edit permissions be required for uploading attachments,
provided it includes tests.

With regards
Marcus Ramberg

On Tue, Nov 24, 2009 at 5:50 AM, sean_ellis <meanwhiledown at hotmail.com> wrote:
> sean_ellis wrote:
>> I've installed MojoMojo-0.999041 from cpan
>> I created a new user via the registration, not an admin. I can limit the
>> new user's privileges to only editing his home page, but so far, no matter
>> what I've tried, he is still able to upload attachments to the root page.
>> According to what I see in the path_permissions table (only view_allowed)
>> this should not be the case.
> HI
> responding to my own post:
> after digging around I've come to the conclusion that the behaviour that I
> described above may be the default, and intentional
> I've managed to get what I wanted by wrapping the uploader display code in
> attachments.tt with a check for attachment privileges which seems to be
> working, so I'm happy
> Sean
> --
> View this message in context: http://n2.nabble.com/attachment-permissions-tp4048482p4055858.html
> Sent from the mojomojo mailing list archive at Nabble.com.
> _______________________________________________
> Mojomojo mailing list
> Mojomojo at lists.scsys.co.uk
> http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/mojomojo

More information about the Mojomojo mailing list