Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-15932

Users can delete their attachments in the UCP, even if the post is locked

    XMLWordPrintable

    Details

      Description

      In the UCP, users can delete their attachments (if the feature is enabled), regardless the status of their posts.

       

      Indeed, users cannot edit or remove their locked post BUT they can still delete the attachments in the locked posts. Normally, if a moderator or administrator decided to lock a post, he/she wanted the author isn't able to alter the locked post in any way. Therefore, it's definitely a bug.

       

      Someone has been already aware of this flaw since 2010 and another person suggested to disable the module in the ACP (see https://www.phpbb.com/community/viewtopic.php?t=2101097) but entirely disabling the feature in the UCP is not a satisfactory solution. Admins could want to let the users to manage their attachments, except for locked posts. Moreover, some admins may be not aware of that bug.

        Attachments

          Activity

            People

            Assignee:
            Senky Senky
            Reporter:
            Big Monstro Big Monstro
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: