Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-14983

Files are still available when object is moved to trash [patch]

    XMLWordPrintable

    Details

      Description

      Files in objects that are moved to trash are still available using direct URL access. They should not be. The patch fixes this by renaming the files when trashing them.

      The patch only covers eZBinaryFileType. The same fix also needs to be done for eZImageType and eZMediaType. I can do this if the principle in the patch is approved.

      The patch adds the function trashStoredObjectAttribute() to the eZDataType API, following the same logic as deleteStoredObjectAttribute(). Only those datatypes that need any trashing changes will have to implement it, and that means the attributes that store files (binaryfile, image and media).

      No changes are needed on restoring from trash, unless we consider it important that the filename is reverted back to the original - I don't see why this should matter. It makes things a bit more complicated.

      *) This is slightly more complex as we need to remove image variations, as well as rename the original.

      Steps to reproduce

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                gl (inactive) Gunnstein Lye
                Reporter:
                gl (inactive) Gunnstein Lye
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: