Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon5.gif   Drop attachments here..., posted by Xuan Wu on Wed Jun 23 03:48:22 2021 
    icon2.gif   Re: Drop attachments here..., posted by Sebastian Schenk on Mon Jun 28 14:53:44 2021 
       icon2.gif   Re: Drop attachments here..., posted by Xuan Wu on Mon Jun 28 18:41:31 2021 
          icon2.gif   Re: Drop attachments here..., posted by Sebastian Schenk on Tue Jun 29 15:21:06 2021 
             icon2.gif   Re: Drop attachments here..., posted by Sebastian Schenk on Tue Jun 29 20:13:36 2021 
                icon2.gif   Re: Drop attachments here..., posted by Stefan Ritt on Tue Jun 29 20:20:38 2021 
                   icon2.gif   Re: Drop attachments here..., posted by Sebastian Schenk on Wed Jun 30 13:50:08 2021 
                icon2.gif   Re: Drop attachments here..., posted by Xuan Wu on Wed Jun 30 04:38:21 2021 
Message ID: 69383     Entry time: Wed Jun 30 04:38:21 2021     In reply to: 69381
Icon: Reply  Author: Xuan Wu  Author Email: wux@ihep.ac.cn 
Category: Question  OS: Linux  ELOG Version: 3.13 
Subject: Re: Drop attachments here... 

Excellent, Thanks!

Sebastian Schenk wrote:

I could figure out the bug. A fix can be found in this commit.
https://bitbucket.org/merrx/elog/commits/c3e3c4af9666006558aaf26d8f4841800e69f9af

Sebastian Schenk wrote:

In my testings I didn't found this behaviour, but my collegues also reported this issue.
So I searched for the difference between my test setup and the production logbooks.

I believe the "restrict edit = 1" config option may be responsible for this behaviour.
I had the browser console running in the background and "Drag&Drop" send an XHR request,
which failed with the message: "Only user can edit this entry".
This message is tied to the "restrict edit" option as far as I know.
So I tried removing the option and upload via "Drag&Drop" started to work as intended.
This behaviour only occurs for non-admin users, as admin users are not affected by

Can you verify this?
I can verify to get the same error message in this elog forum in the browser console.

Xuan Wu wrote:

I just used my own account to test the "Drag&Drop" function in this forum ,  and it failed.  In our case, we need to upload ten more images into logbook at once, it's more effective to use "Drag&Drop" than "Browse&Upload" feature for "Browse&Upload" only can choose one attachment at once, but "Drag&Drop" can choose several attachments at once. The admin user can use this feature, but non-admin user not in our site. I did run the elog server as  user "root". I'm not sure it is related to the problem.

Sebastian Schenk wrote:

I can't confirm this behavoiur. In our instance, every user can use the attachment function of the elog.
Either through "Drag&Drop" or "Browse&Upload" in the entry editor.

What do you mean by "root" user?
The elog can have serveral admin users, but this behaviour is equal for admin and non-admin users.
You should not run the elog server as user "root" of the machine for security reason, but also for issues with file permissions.

Xuan Wu wrote:

The function of "Drop attachments here..." is only for root user? I'd like it could be used by all users.

 

 

 

 

 

ELOG V3.1.5-fe60aaf