mahara-contributors team mailing list archive

[Kristina Hoeppner <2010052@xxxxxxxxxxxxxxxxxx>]

*** This bug is a duplicate of bug 1995817 ***
    https://bugs.launchpad.net/bugs/1995817

** This bug has been marked a duplicate of private bug 1995817

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: mahara-contributors
https://bugs.launchpad.net/bugs/2010052

Title:
  Access denied for Group Files in Group Journal

Status in Mahara:
  New

Bug description:
  In Mahara 22.04. our users cannot create group journal entries with
  embedded images, and when files are added as attachments to this
  entry, they cannot be downloaded (an access denied message is shown).
  The uploaded files are accessible (and downloadable) in the group
  files section, so users should be able to access them (permissions are
  all selected).

  Steps to reproduce:
  1. Create a Group
  2. Add a Group Journal
  3. Add a entry to that journal
  4. Embedded an image in the entry textfield
  5. Create an attachment to that entry
  6. Submit

  Expected behaviour: Show image in entry and allow download of
  attachment.

  Actual behaviour: No image (browser console shows an 403 error),
  access denied message when trying to download attachment.

  The same is true for embedding images in the journal description.
  Embedding an image from the users own files seems to work.

  We run Mahara 22.04.3 on MySQL 8.0.32 and PHP7.4. However, I also
  tested it on the demo platform (https://demo.mahara.org/) with the
  same result. As far as I can reproduce, it works as expected in Mahara
  20.10 and breaks in Mahara 21.04. I attach a screenshot of my test on
  the demo platform.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/2010052/+subscriptions