This project is read-only.

Permission for Media


Currently there is no permission for Media, so anybody can manage media having permission for accessing the admin panel.


justrhysism wrote Aug 18, 2013 at 11:35 PM

This would be a brilliant feature.

BertrandLeRoy wrote Aug 22, 2013 at 5:34 AM

Don't we already have that? Shouldn't content permissions just work?

Piedone wrote Aug 22, 2013 at 9:34 AM

Almost. There is one permission, ManageMediaContent, however:
  • This permission is not checked on the front page of the Media Library and most of the actions of its AdminController are not authorized at all. I.e. there is no way to restrict access to the main admin page (the Media menu item will be hidden but nevertheless you can access the actions).
  • While this permission is checked in some actions like when the preview infobox of an item is displayed when clicking on it and it is checked against the media item too it's not enough to restrict access to the item: this permission is not an dynamic content permission so you can either fully give it to a role or fully revoke it, no fine-grained access control.
  • In conjunction with the previous point, ViewContent or EditContent permissions are not checked for media items in Media Library.
That said the full editors of items are indeed authorized since these go through the standard content admin.

BertrandLeRoy wrote Aug 22, 2013 at 10:24 PM

That's not what I was talking about. I was talking about content permissions, the feature that enables you to have fine-grained permissions on individual content items.

BertrandLeRoy wrote Aug 22, 2013 at 10:25 PM

Never mind, I understand what's being asked is a lot less granular.

Piedone wrote Sep 12, 2014 at 11:43 AM