John Cardinal cce07f3e6b case 4727 - attached-by override for admins only, export download by its owner only ...

OverrideUserId on attachment upload is used only from SuperUser or a user
with change rights on User, otherwise ignored. Export files carry the
user's id in their name and export/download serves only the key user's
own export files. F25 (4727 step 5).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 21:39:50 -07:00

30 KiB

Raw Blame History

View Raw