a) you should include texteditor control instead of fckeditor directly, this allows system admins to switch editor easily

b) users need to be granted to upload files to a folder in admin :: file manager, by granting edit permission. This is by design, and you should not work around it.

I am using the core module 'Repository' (blog style) to allow any registered user to post text to the site (modified resource file to change "Upload" to read as "Post Classified") . However, the default behavior that I am getting is that the FCKEditor provides access to everything within the directory structure of the site and that much access just seems - ah, not good?

How can I configure the module (Repositor) to provide just a text editor so that I can avoid what may be a variety of security risks by providing them with the FCKEditor that is so full featured! Can we trust that non-admins will not be able to upload files?

I'm noticing that THIS editor has the 'Insert/Edit' image control - which gives the world visibility into the file system directory structure (ah, ok) but does appear to have the file upload capability disabled somehow.

Humm...let's see what I can find?

Help!

- Don