[rt-users] RT Unprivileged user with SeeCustomField and ModifyCustomField rights not able to download file from custom field of type "upload one file"

[Abhimanyu Rapria]

Hi,

Version 4.0.5 OR 4.0.8

RT Unprivileged user with SeeCustomField and ModifyCustomField rights not
able to download file from custom field of type "upload one file"

So if the want to come to self service portal in future to download some
report uploaded in a custom field, they cant do it.

On clicking file name, service service page refreshes to self service home.

>From behavior looks like unprivileged users don't have some rights
on http://<FQDN>/rt/Download/CustomFieldValue/86/<filename>

Privileged users with same rights can download the file from exactly same
url http://<FQDN>/rt/Download/CustomFieldValue/86/<filename>

This is confirmed by the fact that if i take url
http://<FQDN>/rt/Download/CustomFieldValue/86/<filename>
and put it in another tab of browser where unprivileged user is logged in,
it will not download and open unprivileged user logged in home page.

If i take url http://<FQDN>/rt/Download/CustomFieldValue/86/<filename> and
put it in another tab of browser where privileged user is logged in, it
will download the file.

If this is confirmed to be a bug, i will proceed to submit a bug report.

br,
Rapria
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bestpractical.com/pipermail/rt-users/attachments/20121108/86539d64/attachment.htm>