[IMPLEMENTED] Role for Assets

Vitali_Nikolenko · December 24, 2022, 11:48am

Hi,
In many releases, I see a lot of work on assets. Thanks for the improvements!
In assets settings we have the flag “Protected” that allow works with assets only with token key. But we do not have an role restrictions for assets or some assets list like on schemas.
This feature would be useful:)

If it already exist please indicate the version with which it is available. I haven’t found it yet.

Vitali_Nikolenko · December 24, 2022, 12:15pm

Also, depending on the implementation, you may need to implement an API to assign a list of roles to assets using another role.

Sebastian · December 24, 2022, 1:27pm

It is the normal read role: assets.read: https://github.com/Squidex/squidex/blob/master/backend/src/Squidex.Shared/PermissionIds.cs#L150

See implementation

github.com

Squidex/squidex/blob/master/backend/src/Squidex/Areas/Api/Controllers/Assets/AssetContentController.cs#L109



private async Task<IActionResult> DeliverAssetAsync(Context context, IAssetEntity? asset, AssetContentQueryDto request)
{
    request ??= new AssetContentQueryDto();

    if (asset == null)
    {
        return NotFound();
    }

    if (asset.IsProtected && !Resources.CanReadAssets)
    {
        Response.Headers[HeaderNames.CacheControl] = "public,max-age=0";

        return StatusCode(403);
    }

    if (asset != null && request.Version > EtagVersion.Any && asset.Version != request.Version)
    {
        if (context.App != null)
        {

Vitali_Nikolenko · December 24, 2022, 2:10pm

I am using this role. For example the case, I have 2 clients with tokens: one is frontend, and the second is some kind of application. Some assets should only be accessible by another application.

Sebastian · December 28, 2022, 2:57pm

First I was thinking to just implement it, but I think I will improve the scripting to make features like this possible.

Sebastian · January 5, 2023, 5:54pm

I have implemented asset scripts for queries, that should help to implement that. Will be deployed on Tuesday.

system · January 7, 2023, 5:53pm

This topic was automatically closed after 2 days. New replies are no longer allowed.