BookStack
BookStack copied to clipboard
Permission to delete or edit attachments after changing ownership of a page
Attempted Debugging
- [x] I have read the debugging page
Searched GitHub Issues
- [x] I have searched GitHub for the issue.
Describe the Scenario
Hi @ssddanbrown,
first of all, thanks for your great work.
Can you tell whether the following behavior is desired? If the owner of a page changed the new owner can not delete or edit the attachments the former owner attached. The new owner can upload new attachments but can not edit/delete attachments already added. I assumed that the new owner would also receive the ownership for the page attachments.
Steps to Reproduce
- Create a page and upload an attachment
- Set a new owner of the page (the new owner should only have permission to edit or delete their own attachments)
- Login with the new owner and open the page created in step 1
- Open attachment sidebar
- Try to delete / edit attachments
Exact BookStack Version
v25.07.3
Log Content
Hosting Environment
PHP8.3, Ubuntu 24.04 installed using official installation script