I've found that (Community) users can upload Files to a record via the related list component despite having read-only access to the record. There also doesn't seem to be any way to prevent the "Upload" button/option from appearing. Since in our case doing so makes that file visible to everyone who can see the record, such as all other Community users, this is totally unacceptable and unexpected. Is it really true that, with the Lightning UX, we cannot prevent users from uploading files to records if they can see the Files related list at all? Perhaps I'm missing something.
2 件のコメント
My point was the record is read-only, so being able to modify it any any way visible to anyone (attach files to it) was surprising and undesired. Good to know those alternatives, but I'd submit that it is clearly a missing feature if the system has no native, configurable way to view a record's Files read-only. (It isn't obvious that it works this way, either, which can introduce unexpected consequences.)
