Contrib.social

[Attachments] Cannot access Attachment with token

Open on Drupal.org →
Created on 12 February 2024, 4 months ago
Updated 2 May 2024, about 2 months ago

Problem/Motivation

I want to provide access to an Attachment PDF field via an access token.

Steps to reproduce

I have attached a simple Webform with an Attachment field to import.

The Submissions configuration for this form is configured to:

  • Allow users to view a submission using a secure token
  • Allow users to update a submission using a secure token
  • Allow users to delete a submission using a secure token

Steps:

  1. Import the attached form
  2. As an anonymous user, that doesn't normally have permission to access webform submissions, submit the form
  3. As an anonymous user, either navigate to /webform/test/submissions/[sid]?token=[token] or, if you have email set up, the tokenized url is also in the body of the email for convenience.

Results:

  1. Anonymous user has access to the tokenized Submission url as expected
  2. Anonymous user does NOT have access the the Attachment url as expected

Proposed resolution

Allow access to the attachment using the generated token

🐛 Bug report
Status

Closed: works as designed

Version

6.2

Component

Code

Created by

🇺🇸United States sassafrass

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024