Inconsistent user permissions?

[tgenerelo]

I'm having a hard time setting up the app the way I need it to work. In particular, I'm confused about some parameters in settings.py, I'm not sure wether I'm misunderstanding them or are not behaving as they should.

CAN_ADD_MEDIA = "advancedUser"
I'd expect that a regular user shouldn't be allowed to upload files, but that's not the case. My test user can use the upload button with no issues.

REGISTER_ALLOWED = False
USERS_CAN_SELF_REGISTER = False
What's the point of these two separated variables? I'd expect that if REGISTER_ALLOWED is false, no one should be able to self-register. It's taken me a while to figure out that I needed to set the second one to False.

Can someone enlighten me? Thank you in advance!

[mgogoulos]

Hi,

check on https://github.com/mediacms-io/mediacms/blob/main/docs/admins_docs.md

• if you set REGISTER_ALLOWED = False, the 'sign up' button at the top right is hidden
• if you set USERS_CAN_SELF_REGISTER = False, then users cannot self register, even if they visit the sign up page

so you have to set both if you want to prevent new sign ups. And I agree that they could be combined in a single setting, so you don't have to set both!

As far as the option CAN_ADD_MEDIA = "advancedUser", if you set it and try to visit the Upload link while being a normal user (not advancedUser), the upload button is available, but if you enter any of the two options (used to be Upload only, now it's also the option to record screen), you will see the message

User cannot add media, or maximum number of media uploads has been reached.
Contact portal owners for more information.

and you can't upload...

[tgenerelo]

Thank you for your answer. The self-register part makes sense, although overriding REGISTER_ALLOWED when USERS_CAN_SELF_REGISTER is false would be a nice touch.

However, I was able to upload a video with a regular user when I tested it this morning. I'll try it again tomorrow, though!

[tgenerelo]

I've tested it again, and it does seem to work properly. I must have been mistaken and not tested it properly the last time. Thank you!