Non-subscribers added to a project get admin rights #49563

Open
opened 2016-10-04 12:40:40 +02:00 by Sybren A. Stüvel · 2 comments

If a user shares their project with a non-subscriber, that non-subscriber also gets admin rights. See this email:

Re: Fwd: Bcloud projects question
From:	Nelson Gonçalves <nafergo@gmail.com>
To:	"Dr. Sybren A. Stüvel" <sybren@blender.studio>
Date:	Yesterday 22:18

Hi again,

The project is this one:
https://cloud.blender.org/p/p-574635c7c379cf17984532f6/

Pedro Araujo (pholdrep) is not an active/pay subscriber, he has a free 
account, created to store blender settings. I'm sharing my project with 
him and he was able to upload files to this project.

All the best,

nelson

We might want to at least prevent people from uploading new stuff to a project when they're not subscribers. However, such a change may have quite an impact on the permission system.
Also see #49561

If a user shares their project with a non-subscriber, that non-subscriber also gets admin rights. See this email: ``` Re: Fwd: Bcloud projects question From: Nelson Gonçalves <nafergo@gmail.com> To: "Dr. Sybren A. Stüvel" <sybren@blender.studio> Date: Yesterday 22:18 Hi again, The project is this one: https://cloud.blender.org/p/p-574635c7c379cf17984532f6/ Pedro Araujo (pholdrep) is not an active/pay subscriber, he has a free account, created to store blender settings. I'm sharing my project with him and he was able to upload files to this project. All the best, nelson ``` We might want to at least prevent people from uploading new stuff to a project when they're not subscribers. However, such a change may have quite an impact on the permission system. Also see #49561

Changed status to: 'Open'

Changed status to: 'Open'

Added subscribers: @dr.sybren, @fsiddi, @pablovazquez

Added subscribers: @dr.sybren, @fsiddi, @pablovazquez
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: archive/pillar#49563
No description provided.