-
Bug
-
Resolution: Unresolved
-
Low
-
None
-
6.13.10, 7.4.0, 7.10.1, 7.11.0, 7.12.3
-
None
-
4
-
Severity 2 - Major
-
1
-
Issue Summary
If an attachment got deleted, it gets moved to the trash. Before the attachment is purged from the trash. Users will still be able to access the attachment preview if a user saves the preview URL.
Steps to Reproduce
- Upload attachment
- Click on the attachment to preview the attachment
- Copy the preview URL
- Delete the attachment
- Paste the preview URL in another browser tab
If it's an image, you'd still be able to download the image via the browser.
Expected Results
Deleted attachments shouldn't be able to preview by the user anymore.
Actual Results
The user is still able to preview deleted attachments.
Workaround
Purge the attachment from the trash right away after deleting it.
- If the purged attachment is linked, then during preview an opaque layer displays with no close button. There is no way to close the preview mode
- is related to
-
CONFSERVER-42826 Attachment thumbnails are not being removed from the filesystem when an attachment is deleted
- Gathering Impact