mirror of
https://github.com/wekan/wekan.git
synced 2026-11-07 02:52:33 -05:00
Lauri Ojansivu
d8b3579117
#6870 asks for a site-wide switch that turns attachments off, because the per-board allowsAttachments flag has to be set on every board. That switch is there already: Admin Panel / Attachments / Transfer limits, "Attachments upload" and "API upload" set to Blocked, and the server refuses on every path - the upload pipeline, api.attachment.upload and .copy, and the /api/attachment upload, upload-background and copy routes. What was missing is that the card still showed the "+" button and accepted a drop for an upload that would be refused. attachmentUploadPolicy tells a signed-in client the one boolean (nothing about the limits), asked at most once a minute, and the "+" and the drop/paste upload follow it. No second setting is added, so there is nothing that could disagree with what the server enforces. tests/attachmentUploadPolicy.test.cjs pins the client, the method, and the server enforcement it relies on, and that no "disableAttachments" setting exists. Thanks to Raymond-Voogt and xet7 ! Refs #6870, not closed: the reporter asked for a single Features checkbox, and the two Blocked limits are two settings.