Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Options
[FileUpload] Who owns a file?
judgej
✭
Who should own a file that gets uploaded to a comment or discussion? Should it be the uploading user, or the owner of the comment?
At the moment it is the uploading user. If user A uploads a file to user B's discussion, then user B cannot remove that file; it is stuck there on their discussion. Only user A or an administrator can remove that file. User A is likely to be an administrator anyway, to upload to someone else's comment.
Is this the intended functionality, or an oversight?
At the moment it is the uploading user. If user A uploads a file to user B's discussion, then user B cannot remove that file; it is stuck there on their discussion. Only user A or an administrator can remove that file. User A is likely to be an administrator anyway, to upload to someone else's comment.
Is this the intended functionality, or an oversight?
0
Comments
Vanilla Forums COO [GitHub, Twitter, About.me]
Vanilla Forums COO [GitHub, Twitter, About.me]