image permissions only halfway working, private images still visible via bbcode embed
Remove these ads. Join the Worldbuilders Guild
image permissions only halfway working, private images still visible via bbcode embed
If you set permission PRIVATE for an image and add subscriber groups, it should be only visible to those groups. This is only partially working. If you include said image via bbcode, you see the image right inside the article, despit it being private. The only thing that is being blocks is when you CLICK the image, then you do not get the full version but only the customized forbidden page instead.
Steps to Reproduce
- upload image
- set image to PRIVATE
- assign any subscriber groups to it
- save
- embed the image via BBCode into an article
- view article as anonymous -> image is visible
Operating System
WindowsBrowser
Google ChromeHistory
Hey Tillerz that was always the case (no change there) - I cannot make a massive change like that without a massive update notice to everyone on the website because that might mean hundreds of thousands of images becoming suddently inaccessible to people. I am not against changing that but it will require a big announcement - this would be considered a feature change
Find your way!
Resources
WHO WE ARE
LEGAL
Get the news
Listen to our Podcast
Our Allies
