This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.

We've moved the forum!

Please use forum.silverstripe.org for any new questions (announcement).
The forum archive will stick around, but will be read only.

You can also use our Slack channel or StackOverflow to ask for help.
Check out our community overview for more options to contribute.

Data Model Questions /

Moderators: martimiz, Sean, Ed, biapar, Willr, Ingo, swaiba

ModelAdmin and permissions to Files and Images

2 Posts 1871 Views

snichme

Community Member, 2 Posts

2 April 2010 at 11:51pm

Hi
Some thoughts about permissions and ModelAdmin

I think the permissions CMS_Main and AssetsAdmin is a bit wierd, a user need the permission CMS_Main to be able to upload a file using ModelAdmin. Shouldn't it be the permission AssetsAdmin?

I have a DataObject with a $has_one relation to a Image and users with CMS_Access_{ModelName} can access it and save it but he can only upload a image if he has CMS_Main. I get a permission error in the iframe (the one that uploads the image) when the user only have AssetsAdmin.

What is AssetsAdmin for then? is it necessary :)

//Magnus

Judge

Community Member, 79 Posts

12 April 2010 at 12:10am

Edited: 12/04/2010 12:11am

AssetsAdmin is a pretty high privilege that gives access to all the assets. I would assume you would want to keep that away from most users. It is also all about the back-end administration rather than front-end website, which may explain why AssetsAdmin does not give upload privilege to front-end users.

-- JJ

Return to top