Opened 4 years ago

Closed 4 years ago

Last modified 4 years ago

#803 closed bug (invalid)

Move document causes error if DELETE permission is not given

Reported by: marco.pozzi Owned by:
Priority: minor Milestone:
Component: User Interface Version: 7.7
Keywords: delete permission move Cc:

Description

After updating to 7.7, users receive an error when a document is moved from a folder to another (e.g. via drag & drop on the browser).

This error says that the document cannot be deleted without DELETE permission.

In fact, the document has not to be deleted but just moved, so I think it's a bug.

Could you please check this behaviour?

Thank you.

Change History (3)

comment:1 Changed 4 years ago by car031

  • Component changed from Android App to User Interface
  • Milestone 7.7.1 deleted
  • Priority changed from major to minor
  • Resolution set to invalid
  • Status changed from new to closed

Not a bug, for security reasons you cannot move a file without the delete permission in the original folder, this behavior is implemented to avoid cases such this:

  • The user does not have the DELTE permission in folder A but has the DELETE permission in folder B
  • The user moves a file from A to folder B
  • The file now exists in folder A only
  • The user delete the file

The result is that a user without DELETE permission was able to delete a file.

comment:2 Changed 4 years ago by marco.pozzi

Thanks, that's clear.

But has this changed in 7.7? In previous editions the behaviour was different.

Marco

comment:3 Changed 4 years ago by car031

yeah, this is a correction we applied in the 7.7

Note: See TracTickets for help on using tickets.