Skip to main content

This site requires you to update your browser. Your browsing experience maybe affected by not having the most up to date version.

We're retiring the forums!

The SilverStripe forums have passed their heyday. They'll stick around, but will be read only. We'd encourage you to get involved in the community via the following channels instead:

Data Model Questions /

Moderators: martimiz, Sean, Ed, biapar, Willr, Ingo, swaiba

ModelAdmin and permissions to Files and Images

Go to End

2 Posts   1510 Views


Community Member, 2 Posts

2 April 2010 at 11:51pm

Some thoughts about permissions and ModelAdmin

I think the permissions CMS_Main and AssetsAdmin is a bit wierd, a user need the permission CMS_Main to be able to upload a file using ModelAdmin. Shouldn't it be the permission AssetsAdmin?

I have a DataObject with a $has_one relation to a Image and users with CMS_Access_{ModelName} can access it and save it but he can only upload a image if he has CMS_Main. I get a permission error in the iframe (the one that uploads the image) when the user only have AssetsAdmin.

What is AssetsAdmin for then? is it necessary :)



Community Member, 79 Posts

12 April 2010 at 12:10am

Edited: 12/04/2010 12:11am

AssetsAdmin is a pretty high privilege that gives access to all the assets. I would assume you would want to keep that away from most users. It is also all about the back-end administration rather than front-end website, which may explain why AssetsAdmin does not give upload privilege to front-end users.

-- JJ