If i used a media in previous node revisions, everybody (exclude administrators and owners) will missing permission to access this media.
return AccessResult::forbidden('Access to this media asset is restricted to administrators and owners.');
But if i has permission to view all revisions, and see this node revision, the media will missing.
I think we should check all parent revisions' access.
- Given I am an administrator
- Create a Draft node contain a media file by CKEditor Embed
- Then remove this media, and publish this node.
- Given I am a user that have view all revisions permission (no administrator)
- Then goto node revisions' list, see the draft version
- Missing media.
Needs work
2.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
@Oscaner which media_private_access permission mode did you use for this media type?
Is 🐛 Private file download returns access denied, when file attached to revision other than current Needs work related here? Is this clearly a bug in media_private_access or just an effect of the core issue?
Setting priority to major according to the effects.