Permissions only seem to hide command buttons that are created by the content type directly. Additional command buttons, like "Add Files" show for every authenticated user regardless of their space membership. This doesn't allow them to actually add files, but it does lead to user confusion about what they actually have access to do. If there is a method to make this option hidden, I would like to know how to do it for my custom command button as well.

Steps to reproduce

1) Create a space
2) create a file section
3) view space with user not admin or part of space
Expected: don't see add files under +
Actual: see add file, can click it and get to plupload dialogue but not past that

CommentFileSizeAuthor
Screen Shot 2015-05-29 at 11.27.37 AM.png28.5 KBcgove

Comments

hefox’s picture

hefox commented
Component: Code » Files App
Issue summary: View changes

Confirmed as bug, added steps to reproduce

hefox’s picture

hefox commented
Status: Active » Fixed

Fixed the issue specific to that menu callback, don't know of it being the case for others path.

cgove’s picture

cgove commented
Title: "Add Files" command button shows for non-members of the space » Custom command button shows for non-members of the space
Component: Files App » Code
Category: Bug report » Support request
Status: Fixed » Active

I'm seeing the same thing with my custom command button. It is called "Create News Page" and is a clone of "Create Document Page" with the URL "node/add/oa-wiki-page?edit[field_oa_wiki_page_no_redirect][und]=1". That way content editors don't have to click the checkbox for every post in News Sections. This command button is exhibiting the same behavior that Add Files was. (showing for non-members) I created it under the same "Node Creation Button" list "Create Document Page" was listed on.