mahara-contributors team mailing list archive

[Robert Lyon <robertl@xxxxxxxxxxxxxxx>]

** Changed in: mahara/1.9
       Status: Fix Committed => Fix Released

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1267686

Title:
  Group member can't access their own group file

Status in Mahara ePortfolio:
  Fix Committed
Status in Mahara 1.10 series:
  Fix Released
Status in Mahara 1.8 series:
  Fix Released
Status in Mahara 1.9 series:
  Fix Released
Status in Mahara 15.04 series:
  Fix Committed

Bug description:
  I have a group, 'Group1' that has some members

  I log in as Member A, upload an image file to a group files and makes
  sure the role perms are all ticked for the file.

  I then log out and log in as Member B and I can un-tick the member and tutor options for that file.
  On saving I can't see the file, which is correct.

  I then log out and in as Member A again. I can see the file listed in
  group files list but without the image icon and when I click on the
  filename I get Access denied message.

  It will also stop me from being able to download the file when using a
  'Files to download' block

  Conversely, the image will display in a image gallery block even for
  other members, who are not allowed to view image file.

  As Member A I can edit the file and re-tick the member role boxes to
  get proper access back - but is a bit of a pain if I have many files
  and another member has removed member role permissions.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1267686/+subscriptions