Permission to delete or edit attachments after changing ownership of a page #5471

New Issue

OVERLORD · 2026-02-05T10:05:29+03:00

OVERLORD commented

2026-02-05 10:05:29 +03:00

Originally created by @mohnbroetchen2 on GitHub (Oct 29, 2025).

Attempted Debugging

I have read the debugging page

Searched GitHub Issues

I have searched GitHub for the issue.

Describe the Scenario

Hi @ssddanbrown,

first of all, thanks for your great work.

Can you tell whether the following behavior is desired?
If the owner of a page changed the new owner can not delete or edit the attachments the former owner attached. The new owner can upload new attachments but can not edit/delete attachments already added. I assumed that the new owner would also receive the ownership for the page attachments.

Steps to Reproduce

Create a page and upload an attachment
Set a new owner of the page (the new owner should only have permission to edit or delete their own attachments)
Login with the new owner and open the page created in step 1
Open attachment sidebar
Try to delete / edit attachments

Exact BookStack Version

v25.07.3

Log Content

Hosting Environment

PHP8.3, Ubuntu 24.04 installed using official installation script

Originally created by @mohnbroetchen2 on GitHub (Oct 29, 2025). ### Attempted Debugging - [x] I have read the debugging page ### Searched GitHub Issues - [x] I have searched GitHub for the issue. ### Describe the Scenario Hi @ssddanbrown, first of all, thanks for your great work. Can you tell whether the following behavior is desired? If the owner of a page changed the new owner can not delete or edit the attachments the former owner attached. The new owner can upload new attachments but can not edit/delete attachments already added. I assumed that the new owner would also receive the ownership for the page attachments. **Steps to Reproduce** 1. Create a page and upload an attachment 2. Set a new owner of the page (the new owner should only have permission to edit or delete their own attachments) 3. Login with the new owner and open the page created in step 1 4. Open attachment sidebar 5. Try to delete / edit attachments ### Exact BookStack Version v25.07.3 ### Log Content ```text ``` ### Hosting Environment PHP8.3, Ubuntu 24.04 installed using official installation script

OVERLORD added the 🐕 Support label 2026-02-05 10:05:29 +03:00

OVERLORD closed this issue

2026-02-05 10:05:29 +03:00

OVERLORD commented

2026-02-05 10:05:31 +03:00

@mohnbroetchen2 commented on GitHub (Jan 9, 2026):

Dan Brown answered in a support message:
In BookStack, ownership does not propagate to related items when changed on a shelf/book/chapter/page.
This means that any images, attachments or comments will belong to their original creator/uploader, regardless of whether the related page owner changes.
So what you are seeing is what's expected, although I appreciate this logic may be less helpful for your scenario compared to the logic you expected.

@mohnbroetchen2 commented on GitHub (Jan 9, 2026): Dan Brown answered in a support message: In BookStack, ownership does not propagate to related items when changed on a shelf/book/chapter/page. This means that any images, attachments or comments will belong to their original creator/uploader, regardless of whether the related page owner changes. So what you are seeing is what's expected, although I appreciate this logic may be less helpful for your scenario compared to the logic you expected.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#5471