access rights to folders for users in fckeditor

[karl.reichert]

Hello,

for uploading images in TestLink, we are using fckeditor with its built-in upload function (not ckfinder).

We are hosting different projects on TestLink.

In the upload-folder for images, we have subfolders project1, project2, project3 and so on, where each project uploads its images, so that the images are not mixed all together but separated for each project.

However, although user XY has only access to project1 in TestLink, when he's uploading an image he can access also the upload subfolders for project2 and project3. This means, he cannot only upload his images into the wrong project folder by mistake, but beyond that he can also see all the images from all projects. This is not good, as they may contain confidential information, which shall be visible to users only, that are configured to have access to that project in TestLink.

So my question is: Is it possible in any way on a Windows server, to deny user XY access (read and write) to subfolder project2 and project3? How to do that? If not, how are other users out there deal with that? I'm sure I'm not the only one that has this use case. By the way, using ckfinder, which may have this ability, is not an option for us because of the license that our company would have to buy to use it in non-demo mode.

If there is currently no way to do that with fckeditor: Would it make sense to file a feature request for that in TestLink's bugtracker? As this is more a feature request for fckeditor, I'm not really sure if it makes sense.

Thanks in advance!
Karl

[karl.reichert]

I wrote a feature request for that: http://mantis.testlink.org/view.php?id=4167