Fossil SCM
Attachment Download Link
a7eff56a9332492…
· opened 15 years, 7 months ago
- Type
- Feature_Request
- Priority
- —
- Severity
- Cosmetic
- Resolution
- Fixed
- Subsystem
- —
- Created
- Sept. 3, 2010 10:58 p.m.
When viewing an attachment on a ticket if the user clicks "Download" and doesn't have the necessary privileges they are redirected to the login page. If the user doesn't have permission to download attachments maybe the link just shouldn't show up?
anonymous claiming to be anonymous added on 2010-09-04 07:37:43:
What is the goal of forbidding attachment downloading while allowing to view it? User can just copy-paste text attachment or run a simple script to reconstruct binary attachment from shown hex-dump, so why do such restriction exist?
anonymous added on 2010-09-27 08:51:10: Attachments and checkouts both result in files transferred from the repository to the user, but it is not clear that the same permission flag (checkout) should be used for both.
The wiki/ticket system attachments are informational in nature and could be of interest to users who are not developers, to whom checkout is usually restricted.
I suggest that ability to read a wiki/ticket should be sufficient privilege to download any attachment to it.