Move document causes error if DELETE permission is not given

[marco.pozzi]

After updating to 7.7, users receive an error when a document is moved from a folder to another (e.g. via drag & drop on the browser).

This error says that the document cannot be deleted without DELETE permission.

In fact, the document has not to be deleted but just moved, so I think it's a bug.

Could you please check this behaviour?

Thank you.

[car031]

Not a bug, for security reasons you cannot move a file without the delete permission in the original folder, this behavior is implemented to avoid cases such this:

• The user does not have the DELTE permission in folder A but has the DELETE permission in folder B
• The user moves a file from A to folder B
• The file now exists in folder A only
• The user delete the file

The result is that a user without DELETE permission was able to delete a file.

[marco.pozzi]

Thanks, that's clear.

But has this changed in 7.7? In previous editions the behaviour was different.

Marco

[car031]

yeah, this is a correction we applied in the 7.7