rosarior/mayan — Issue #16: No permission for Folder creation
Author: spacedman
Created: 2011-12-31 21:53:59+00:00
State: open

I was trying to create a 'read-only' role for users, but discovered they can still create Folders. There's no permission check (and no PERMISSION_* name) for it.

I gave the role permissions to view/download documents and view metadata and tags. Then I checked the code and couldn't see permissions for folder creations!

Ideally I'd like to implement read-only for non-logged in users, using Django's AnonymousUser functionality. This could possibly be switched on/off with a configuration option. What I want to create is a repository where privileged users can upload and anyone can browse and download.