Skip to content

Pictures permission with copy paste not set #1287

Description

@JtheBAB

Describe the bug
When a user add directly with copy & paste in the editor a picture, the picture is visible for all users.

Steps To Reproduce
Steps to reproduce the behavior:

  1. Create two role that allows only to edit / delete own images and add user A to role A and user B to role B
  2. login with user A
  3. Create or edit a page
  4. Copy a picture with copy and paste
  5. save the page
  6. login with user B
  7. Create or edit a page
  8. Insert a picture
  9. You will see the picture from User A

Expected behavior
User B shouldn't see the picture of User A.
When the User A uses the picture upload function, then User B can't see the picture that User A uploaded.

Your Configuration (please complete the following information):

  • Exact BookStack Version (Found in settings): v0.25.1
  • PHP Version: 7.3
  • Hosting Method (Nginx/Apache/Docker): Apache

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions