View Issue Details

IDProjectCategoryView StatusLast Update
1675RackTablesJavaScriptpublic2016-08-26 18:51
Reportertan Assigned Toandriyanov  
PrioritynormalSeveritytweakReproducibilityalways
Status closedResolutionno change required 
PlatformLinuxOSCent OSOS Version6.8
Summary1675: uploaded image preview is not showing in the browser for a normal user login
DescriptionFrom the Main page select the files tab and after uploading the image files and linked to any object. The image file is not able to preview at browser using normal user login but able to preview using admin login
Steps To ReproduceFrom the Main page select the files tab and after uploading the image files and link to any object.
Login with normal user account at browser and click on object you will not be able to preview the image for the object
TagsNo tags attached.

Activities

tan

tan

2016-08-18 07:58

reporter  

issue.png (14,516 bytes)   
issue.png (14,516 bytes)   
andriyanov

andriyanov

2016-08-23 20:12

reporter   ~0003431

I believe this is a configuration issue.
Image preview requests are still authorized like every others using the Configuration -> Permissions ACL.

You could add the line
allow {$page_file} and {$tab_download}

to allow anyone downloading any files.
you could write something like
allow {$page_file} and {$tab_download} and {regular user} and {image file}

to allow only the distinct users/files pairs. Of course, you must have the tags 'regular user' and 'image file' in order to make this working.
tan

tan

2016-08-25 11:12

reporter   ~0003435

After adding the above line at Configuration -> Permissions ACL still the issue is not resolved.
andriyanov

andriyanov

2016-08-25 14:08

reporter   ~0003437

Could you show the entire contents of your Permissions ACL file?
tan

tan

2016-08-26 05:42

reporter   ~0003439

1 allow {$page_file} and {$tab_download} and {regular user} and {image file}
2 allow {$userid_1} or {$tab_default}
3 allow {$username_ana} and {$tab_default}
4 allow {$username_itsupport} and {$tab_default}
tan

tan

2016-08-26 05:42

reporter  

ACL.jpg (64,917 bytes)   
ACL.jpg (64,917 bytes)   
andriyanov

andriyanov

2016-08-26 18:50

reporter   ~0003441

Last edited: 2016-08-26 18:51

That's the case.
{regular user} and {image file} is just a sample of how you can constrain this allow only to some specific users or files.

If security is not a concern for you, just replace line 2 with the following:
allow {$page_file} and {$tab_download}

This will allow any user to download any files, including image previews.

Issue History

Date Modified Username Field Change
2016-08-18 07:58 tan New Issue
2016-08-18 07:58 tan Status new => assigned
2016-08-18 07:58 tan Assigned To => andriyanov
2016-08-18 07:58 tan File Added: issue.png
2016-08-23 20:12 andriyanov Note Added: 0003431
2016-08-23 20:13 andriyanov Status assigned => feedback
2016-08-25 11:12 tan Note Added: 0003435
2016-08-25 11:12 tan Status feedback => assigned
2016-08-25 14:08 andriyanov Note Added: 0003437
2016-08-26 05:42 tan Note Added: 0003439
2016-08-26 05:42 tan File Added: ACL.jpg
2016-08-26 18:50 andriyanov Note Added: 0003441
2016-08-26 18:50 andriyanov Status assigned => closed
2016-08-26 18:50 andriyanov Resolution open => no change required
2016-08-26 18:51 andriyanov Note Edited: 0003441