Skip to main content

This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.

Data Model Questions

ModelAdmin and permissions to Files and Images


2 Posts   1036 Views


2 April 2010 at 11:51pm Community Member, 2 Posts

Some thoughts about permissions and ModelAdmin

I think the permissions CMS_Main and AssetsAdmin is a bit wierd, a user need the permission CMS_Main to be able to upload a file using ModelAdmin. Shouldn't it be the permission AssetsAdmin?

I have a DataObject with a $has_one relation to a Image and users with CMS_Access_{ModelName} can access it and save it but he can only upload a image if he has CMS_Main. I get a permission error in the iframe (the one that uploads the image) when the user only have AssetsAdmin.

What is AssetsAdmin for then? is it necessary :)



12 April 2010 at 12:10am (Last edited: 12 April 2010 12:11am), Community Member, 79 Posts

AssetsAdmin is a pretty high privilege that gives access to all the assets. I would assume you would want to keep that away from most users. It is also all about the back-end administration rather than front-end website, which may explain why AssetsAdmin does not give upload privilege to front-end users.

-- JJ