Ticket #607 (Clôturé Bug: Résolu)
Add File permission give every users a way to add file in any other user area
| Reported by: | gbastien | Owned by: | gbastien |
|---|---|---|---|
| Priority: | Haute | Milestone: | PloneMeeting 1.5 |
| Component: | Produit PloneMeeting | Severity: | Non bloquant |
| Keywords: | Cc: |
Description
As the "Add File" permission is given on every user personal plonemeeting area to the role "Member", every member of the site can add a file in any plonemeeting area of other users... This is caused when we give thsi permission to the config.py/ploneMeetingUpdaters list of roles. Check if we can remove "Member" from this list... Check if it would not be usefull to turn a Meeting into a Folder and to store the generated podtemplates_to_file ATFile instances into it...
Change History
Note: See
TracTickets for help on using
tickets.
