Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsRepositoryRepositoryBug - Unauthenticated Members can delete itemsBug - Unauthenticated Members can delete items
Previous
 
Next
New Post
11/14/2011 11:30 PM
 
I just noticed that items uploaded by unauthenticated members can be deleted by unauthenticated members. This was not the case previously. Don't know which version changed it. I was using 3.5.5 and upgraded to 3.5.6 hoping that it get fixed but that did not work.

Please help. I rely a lot on allowing unauthenticated members to upload documents on my website.

Thank you.
 
New Post
11/15/2011 9:02 AM
 
Yes, that is by design, if you don't care to know who uploads an item, why would you care who deletes it? An item uploaded by an anonymous user is not associated with any 'user' record, so 'any' anonymous user will match the identity of the author, allowing them to edit/delete the item.
 
New Post
11/15/2011 9:46 AM
 

While I still believe that if you decide to allow anonymous users to upload files, you should allow anonymous users to edit/delete them, I believe in providing the most flexibility that I can in the Repository module so that it can be used in whichever way you wish.

I have added a new Module Setting to the 03.05.06 Beta, that will allow you to decide whether you want anonymous users to be able to edit/delete items uploaded by anonymous users. It's a new checkbox on the Module Settings screen right after the Roles section.

I uploaded a new Beta build, 16492, with this new setting implemented.
You can download it at http://www,gooddogs.com/downloads

* UPDATED 11/15/11 *
NEW SETTING - Anonymous Upload Editing/Deleting
A new setting was added so that if you allow anonymous uploads by checking 'All Users' in the Upload Roles section, you can then decide whether you want to allow anonymous users to be able to edit or delete uploads by anonymous users.  If checked, then any anonymous user can edit/delete any item uploaded by themselves or any other anonymous user.  If not checked, the anonymous uploads can only be edited/deleted by an administrator.  

 
New Post
11/16/2011 4:14 PM
 
Thank you, Steve.

I appreciate you giving me the option.
 
New Post
12/30/2012 1:19 PM
 

Will this option be put into an official release of repository module?

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Module ForumsModule ForumsRepositoryRepositoryBug - Unauthenticated Members can delete itemsBug - Unauthenticated Members can delete items


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out