Steps to reproduce:
- create a user whose name is "reader"
- as an administrator, create a File document with no attached file
- as an administrator, grant the Read permission to "reader" on this document
- as "reader", navigate to this document
- try to drop a file in the D&D area
Observe that the upload of the file never ends. If you look at the Network traces, you'll see an exception for the corresponding upload request
{"entity-type":"exception","status":403,"message":"Privilege 'WriteProperties' is not granted to 'reader'"}
Expected behavior: the D&D zone should not be displayed for a read only user.
Note that the refactoring done by NXP-24084 has fixed this problem for Nuxeo 10.1 and above
- is related to
-
NXP-24084 Add drop target to main blob previewer
- Resolved
- Is referenced in