configure permission to view assets via tags doesn't work #6673
Unanswered
alexApplegreen
asked this question in
Error / Bug Report
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Description:
I am trying to have finalized pages tagged with a "release"-tag, such that the page is only visible to a group, if the tag is present on the page. Generally the permission by tag works, users can only see the page when the tag is present. The assets on the page are not visible though. In my specific case I uploaded PDF files to Wikijs and added it to the page which resulted in a link on the page. Clicking it started a download. After adding the permission by my "release"-tag, users from the group which was subject to the permission change was not able to view the file anymore. The Browser directs them to an empty page, just with the word "Forbidden" at the top.
Wikijs Version:
2.5.300
Steps to reproduce:
![image](https://private-user-images.githubusercontent.com/26303785/262974507-36363aaa-318f-44fb-8d99-9d6d7cae96de.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJnaXRodWIuY29tIiwiYXVkIjoicmF3LmdpdGh1YnVzZXJjb250ZW50LmNvbSIsImtleSI6ImtleTUiLCJleHAiOjE3MTkyNjIzNDAsIm5iZiI6MTcxOTI2MjA0MCwicGF0aCI6Ii8yNjMwMzc4NS8yNjI5NzQ1MDctMzYzNjNhYWEtMzE4Zi00NGZiLThkOTktOWQ2ZDdjYWU5NmRlLnBuZz9YLUFtei1BbGdvcml0aG09QVdTNC1ITUFDLVNIQTI1NiZYLUFtei1DcmVkZW50aWFsPUFLSUFWQ09EWUxTQTUzUFFLNFpBJTJGMjAyNDA2MjQlMkZ1cy1lYXN0LTElMkZzMyUyRmF3czRfcmVxdWVzdCZYLUFtei1EYXRlPTIwMjQwNjI0VDIwNDcyMFomWC1BbXotRXhwaXJlcz0zMDAmWC1BbXotU2lnbmF0dXJlPTcwM2U5NmFmOTZhMWU4NjJjMjNiYmFhZjU2ZTY3MmEzMTUwOGFiM2ZkNWIwMTcwNjcwZjFmMjQyNzU3NWNhOGUmWC1BbXotU2lnbmVkSGVhZGVycz1ob3N0JmFjdG9yX2lkPTAma2V5X2lkPTAmcmVwb19pZD0wIn0.J1YRwzR530uz_NyW6yPIHzfOIy_UWVv_w4_p7Y6vzfA)
Create user A and B
Create Groups A and B
Assign user A to group A and user B to group B
Create a page, upload a PDF file and add a link to the page (I used markdown-editor and added the asset by clicking the "Insert Asset" button on the left
Make Group A have permissions to everything
Assign reading permissions to pages and assets to Group B, specified by a tag, like so:
-> User B will not be able to access the PDF
Thanks in advance!
Edit:
Used correct screenshot.
Beta Was this translation helpful? Give feedback.
All reactions