Actions
Defect #15664
closedUnable to upload attachments without add_issues, edit_issues or add_issue_notes permission
Status:
Closed
Priority:
Normal
Assignee:
Category:
Permissions and roles
Target version:
Start date:
Due date:
% Done:
0%
Estimated time:
Resolution:
Fixed
Affected version:
Description
Users with the manage_files permission are currently able to call FilesController#new and FilesController#create. However, uploading files requires permission to call AttachmentsController#upload. If a user has none of the permissions add_issues, edit_issues or add_issue_notes, they cannot upload files in the files tab.
Proposed solution: allow users with the manage_files permission to call AttachmentsController#upload.
Files
Actions