#2574 - Previous avatar permission issue
-
By Adam Edington
- Added
- 0 views
| Identifier | #2574 |
|---|---|
| Issue type | Trivial issue (does not break functionality) |
| Title | Previous avatar permission issue |
| Status | Closed (rejected) |
| Handling member | Chris Graham |
| Addon | General / Uncategorised |
| Description | I changed my Avatar recently (for the use the fourth post that only Malatesa replied to :)). Before the change I took note of the location of my previous avatar (which still exists) @ /uploads/cns_avatars/avatar262085_2.jpg
Trying to re-associate this told me I don't have permission, so I had to reupload it again. Grabbed it from the link that it wouldn't accept. I think a user should be able to link to a previous avatar they have used (given they exist). Maybe a list of them to select from would be useful (and the permission to use them again). |
| Steps to reproduce | |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
We'd need to have a new database table tracking who owns on-disk files. Otherwise by associating to them you could essentially take control of someone else's files, and delete them with a resource delete (potentially anyway). Or, maybe at some point we add an image editor, and you'd be able to edit other people's files.
Maybe that could be worked around by detecting truly orphaned files, but that's dicey given how WYSIWYG can often bypass our upload management.
We'd also need some option to say whether files are left around when replacing uploads or deleting resources. Currently they are only around because the privilege to have them auto-deleted is not there - admins would therefore not benefit, without all this extra work.