U4-2923 - mediaController deleteByID does not validate on delete rights

Created by Per Ploug 24 Sep 2013, 14:05:07 Updated by Shannon Deminick 25 Sep 2013, 00:29:02

The filter for validating whether a user has access to a specific action on a specific media ID, is no implemented So currently the mediaController.deletebyid only validates against the node ID, not the action


Shannon Deminick 25 Sep 2013, 00:28:52

But there is no permissions for media, the only permissions for media is that we check if they have access to the media application and access to the media item by their start node id

Priority: Normal

Type: Bug

State: Closed

Assignee: Shannon Deminick

Difficulty: Normal


Backwards Compatible: True

Fix Submitted:

Affected versions:

Due in version: 7.0.0


Story Points: