Feature Request: Disable possibility of modifying the files extensions #10067
Labels
Feature: File Upload & Handling
Type: Suggestion
an idea
User Role: Superuser
Has access to the superuser dashboard and cares about how the system is configured
Overview of the Feature Request
As an installation admin, I can be sure that the extensions of the deposited files remain unchanged by the user, in order to avoid mischievous deposits "smuggled" passed file extension filters (see related issues).
What kind of user is the feature intended for?
(Example users roles: API User, Curator, Depositor, Guest, Superuser, Sysadmin)
Depositors are affected as they are prevented from editing their files extensions (which also avoids typos),
but the main target benefiting the feature are the installation admins.
What inspired the request?
Discussion about issue :
#10006
and potential ways to bypass such filter.
What existing behavior do you want changed?
When renaming files (API or UI), not being allowed to change the extensions of the files.
Any open or closed issues related to this feature request?
This issue is originated from the discussion in this issue:
This issue is a step towards this issue :
The text was updated successfully, but these errors were encountered: