Currently private files uploaded to Fieldable Panel Panes will not be "access checked". This leads to image-styles not being generated (403) even for administrators.

Steps to reproduce in vanilla panopoly 1.27 (hosted on pantheon):

- Change the default upload destination to "private" for the field "field_basic_image" within the fieldable panel pane "Add Image"
- Create a new instance of "Add Image" via IPE or through admin/structure/fieldable-panels-panes/manage/image/add
- choose an image to upload
- Visit a page to display the newly created instace of this panel pane

Image will not show up, response from Server will be 403 (Access denied)

There is a corresponding issue in fieldable panel panes (https://www.drupal.org/node/2381433) and a patch (https://www.drupal.org/files/issues/fieldable_panels_panes_patch-2381433...) that fixes this issue.

Private uploads within content types are not affected by this issue.

Comments

LCM created an issue. See original summary.

dsnopek’s picture

dsnopek
he/him
Primary language English
Location USA
commented
Status: Active » Fixed

Thanks, this patch looks good! Added to Panopoly. :-)

  • dsnopek committed 5f9253a on 7.x-1.x 
    Update Panopoly Core for Issue #2583449 by LCM: Missing file access...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.