user_picture upload fails during registration without published content access

@brad.bulger, Thank you for reporting this problem. We rely on issue reports like this one to resolve bugs and improve Drupal core.

I am sure this is working as designed. The uploaded image will be published content, so without the permission they can't view it.

Thanks!

If I am creating an account, I don't have an account yet. So I can't possibly be logged in to my account, which doesn't exist.

I can't reproduce this in a simplytest.me generic 10.x site.

Sorry for the churn, I forgot to turn off "View published content" for anonymous users.

+1 to #11

Check core/modules/file/src/FileAccessControlHandler.php, and see the source code here, I think this is a won't fix

Leaning toward #11 and #15 per #11 that an uploaded picture is published content. If for your specific setup you want to wrap individual fields in permissions would look into https://www.drupal.org/project/field_permissions →

Then maybe we should change the default user registration form and add a warning to the default picture field. To say "well technically that's content" is very programmer. If users can't create accounts on the site in a very simple configuration, that seems like a problem? Vs saying Sux2bu?

Seems like an instance of 🐛 Ajax file upload callback improperly checks view published content ('access content') permission Needs work perhaps.

Another option is to remove the picture field from the registration form /admin/config/people/accounts/form-display/register