mahara-contributors team mailing list archive

[Andrew Nicols <643647@xxxxxxxxxxxxxxxxxx>]

Hi Eugene,
Here are the steps I took:
* Create a new post in admin's blog with a picture uploaded and displayed inline in the blog;
* Add the 'Recent Blog Posts' (or any other Blog blocktype I should imagine) into the user's Profile View
* Login as a new user
* View admin's profile
* View the individual blog post (works correctly)
* Go back and view "Admin User's blog"
* After a force refresh to clear the file from my browser cache, the image is no longer shown. Trying to download the image gives an 'Access Denied'.

Enjoy ;)

Andrew

** Summary changed:

- Inserting a file with no description using tinymce gives default description of 'null'
+ Viewing a user's blog (whole blog) doesn't show images or allow downloads (Access Denied)

-- 
Viewing a user's blog (whole blog) doesn't show images or allow downloads (Access Denied)
https://bugs.launchpad.net/bugs/643647
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
Came across this at the same time as bug #643645.
If you view a blog using view/artefact.php, which has downloads (or specifically images) included in it's posts then the appropriate permissions are not set and trying to view the files gives a 403.