mahara-contributors team mailing list archive

[Richard Mansfield <655631@xxxxxxxxxxxxxxxxxx>]

This could be quite annoying to fix, because the files aren't really
marked anywhere as attached to the forum post, they're just sitting in
the body.

I know in the case of blog posts, when you display them in a view, there
is a nasty little regex somewhere that goes through the body of the
post, looks for those download.php links and tries to rewrite the links
to include the viewid*.

It would be possible to do something similar in forum posts, perhaps
appending the userid of the poster to the download link, and then
getting download.php to check that the user in the url has edit
permission on the file artefact.


* Oops, there *used* to be a horrible regex somewhere that did this, but I inadvertently removed the call to that function when I messed with the rendering of blogposts.  Will fix in https://bugs.launchpad.net/mahara/+bug/656096

-- 
Forum post downloads should be publicly available in a public forum
https://bugs.launchpad.net/bugs/655631
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.

Status in Mahara ePortfolio: New

Bug description:
In a public forum (such as the mahara community forum), posts are readable when users are not logged in. However, any files attached to a post are only available when logged in.

As a result, you can only see images posted inline in a forum post when logged in. This also affects users receiving posts in e-mail, and through RSS feeds.

Arguably, if a user receives e-mail updates for forum posts, then this requires a separate resolution since not all groups are public groups. If a user is in a non-public group and receives e-mail alerts for a forum post with an inline image, then we should probably re-write the location of the image and include it as an attachment to the e-mail.