Restrict a user to upload to a specific category only

[kevinhagh2016]

Hi,
I hope this can be done, I have installed MediaCMS and I have found it very good.
What I need is to use RBAC and have an editor to be able to upload to all categories, which is possible, also another user to be able to upload to only one category.
I hope someone could help find a way. Thanks in advance.

Kevin

[mgogoulos]

I believe you can achive what you want using this:

• enable RBAC
• create a Group, add user as contributor there
• add a category, or edit an existing, and set the Group in 'Group Access'

now the user can select that category when editing media. Thus users that visit that category will see the user's media

You can also set the PORTAL_WORKFLOW to something like unlisted or private.

What do you think?

[kevinhagh2016]

Thanks mgogoulos, I will try it and get back.

[kevinhagh2016]

Hi mgogoulos,
I tried it. Here is the situation:
• In settings.py I put:
CAN_ADD_MEDIA = “superuser”, “Uploaders”
• “Uploaders” is the group for the user to upload to one category
• The user that is set to be Editor has no problem and can upload to all categories.
• The user that I want to upload to only one category and made him contributor to that category can’t upload.
Kevin,

[mgogoulos]

Hi,

the CAN_ADD_MEDIA accepts only 'all', 'email_verified', 'advancedUser', in the vanilla version. So it will ignore the option 'Uploaders' because it doesn't know what it is about. And it will allow the first user since admins/managers/editors are allowed in all cases.

But this would be easy to extend so that the function files.methods.user_allowed_to_upload takes under consideration the group and make a decision.

Also to clarify, CAN_ADD_MEDIA affects who can upload media in general, not to specific categories. It's like a step before seeing or not seeing a category.

[kevinhagh2016]

Hi Markos,
Thanks for your help and guidance, this was resolved. I did this as you said:
• CAN_ADD_MEDIA = 'advancedUser'
• made a Group, added user as contributor there, also set user as advanced user.
• made a category and set the Group in 'Group Access'
This configuration is good enough for my requirement. The point is that CAN_ADD_MEDIA only accepts one group not two…
Best Regards,
Kevin