Skip to content
Snippets Groups Projects
Commit 5e56af9c authored by Rick Pasetto's avatar Rick Pasetto
Browse files

FIX DEV-42115: Remove modify permission check that would grant...

FIX DEV-42115: Remove modify permission check that would grant navigate/interact or controls "permission"
Review #27

Back when media controls (an unfortunately much-overloaded word) was called media permission (also an overloaded word), we granted "permission" for interact/navigate or controls "display" if the requestor agent had modify permissions. This decision doesn't seem to make sense, because it is a common use case to want to "disable" controls (or perhaps interaction/navigate) even for the user who created the object (i.e. who has modify permissions). This removes that check.

NOTE that this check is also made on the server, but in that case modify permissions *grants* the right to navigate in that case. Although the code is very similar, the viewer version is trying to address a use case story, whereas the other is trying to prevent a griefing vector.
parent 535a98ce
No related branches found
No related tags found
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment