🐛 Bug Report: Manually uploading file to bucket without permissions still adds permissions

[BlackyWolf]

👟 Reproduction steps

1. Ensure a bucket and team have been created and the team given create access to the bucket
2. Register a user using the appwrite npm library
3. Sign user in
4. Add user to team manually through cloud.appwrite.io
5. Use the appwrite npm library to upload a file to the bucket with update, read, and delete permissions specifically for that user ID
6. Upload a file manually through cloud.appwrite.io without any permissions

I did manually upload the same file twice through cloud to see how appwrite would handle it, but I don't know if that would effect it.

👍 Expected behavior

The file added via user should be restricted to that user with the delete, update, and read permissions.
The manual file should not have any permissions on it whatsoever.

👎 Actual Behavior

The snippet below shows permissions have been added for the last user to upload a file via the npm library. In fact, I deleted the user to see if that would fix it and it did not, so a user with that ID doesn't exist anymore.

🎲 Appwrite version

Appwrite Cloud

💻 Operating system

Windows

🧱 Your Environment

Hosting: Cloud Appwrite 1.5.7
NPM: appwrite@^15.0.0
Framework: React@^18.2.0 w/ Vite@^5.2.0
IDE: VS Code 1.90

👀 Have you spent some time to check if this issue has been raised before?

• I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

• I have read the Code of Conduct

[stnguyen90]

@BlackyWolf, thanks for creating this issue! 🙏🏼 What you're describing seems like the expected behavior as described by our docs:

If you create a resource using a Client SDK without explicit permissions, the creator will be granted read, update, and delete permissions on that resource by default.

If you don't want to grant the user permissions, you may pass an empty array.

Is there anything else you need or can this be closed?

[BlackyWolf]

I apologize for not being clear. I am manually uploading a file using the cloud.appwrite.io UI and it is being assigned a specific user's permissions from when I uploaded a file using a local react app. When I upload the file through the cloud admin UI I leave the permissions blank, so I'm trying to figure out how permissions are getting assigned.