Hi! Thanks for great module.

I tried to use dropzonejs for user picture on registration form. I used dropzonejs with file_browser. I gave permissions 'Dropzone upload files', 'Access Browser for files pages', 'Add and upload new files', 'View files', 'Image: Delete own files' for anonymous and registered users.
Widget works on editing profile page for already registered users, but it doesn't work on registration form. I got errors in iframe of widget after submitting image:

Access denied. You must log in to view this page.

At least one valid file should be uploaded.

For security reasons, your upload has been renamed to ..

I tried to use Upload widget instead Dropzonejs and Upload widget worked fine without errors on registration form.

Please, help somebody to find solution. Thanks!

I have created issue also for file_browser module https://www.drupal.org/node/2835605.

Comments

khiminrm created an issue. See original summary.

khiminrm’s picture

khiminrm commented
Issue summary: View changes
khiminrm’s picture

khiminrm commented

After disabling module r4032login, I have only one error "At least one valid file should be uploaded." in iframe of widget and record in Recent logs "access denied 12/13/2016 - 22:24 /dropzonejs/upload?token=KETVid3eVv… Anonymous (not verified)".

khiminrm’s picture

khiminrm commented

I've tested also on clean Drupal 8 site without additional enabled contrib modules. I've enabled only file_browser and required modules, set permissions for anonymous and registered users.
And again the same error "At least one valid file should be uploaded."

khiminrm’s picture

khiminrm commented

Bug is related with https://www.drupal.org/node/2730351
Patch from https://www.drupal.org/node/2730351#comment-11675823 fixs errors and anonymous user can upload image using dropzonejs widget.

khiminrm’s picture

khiminrm commented
Status: Active » Fixed
andypost’s picture

andypost
he/him
Primary language Russian
commented
Related issues: +#2730351: CSRF check always fails for users without a session

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

chrisroane’s picture

chrisroane commented

If you are using drupal 8.5.6, apply the patch in this comment will make this work for anonymous users:
https://www.drupal.org/project/drupal/issues/2730351#comment-12756271