Put files behind auth #65

New Issue

OVERLORD · 2026-02-04T16:57:40+03:00

OVERLORD commented

2026-02-04 16:57:40 +03:00

Originally created by @NickKelly1 on GitHub (Feb 3, 2021).

Hi, love the project! My wife and I have been making great use of it.

So far as I can tell files are always publicly accessible meaning we can't upload anything sensitive.

Can we put files behind authentication so they aren't accessible without authentication and authorisation?

To recreate this issue:

Attach a file to a card
Open the file
Copy the URL and open in Incognito mode (proving access without authentication and authorisation)

PS. would love to contribute. Are PR's being accepted and are there any contribution guidelines?

Originally created by @NickKelly1 on GitHub (Feb 3, 2021). Hi, love the project! My wife and I have been making great use of it. So far as I can tell files are always publicly accessible meaning we can't upload anything sensitive. Can we put files behind authentication so they aren't accessible without authentication and authorisation? ## To recreate this issue: 1. Attach a file to a card 2. Open the file 3. Copy the URL and open in Incognito mode (proving access without authentication and authorisation) PS. would love to contribute. Are PR's being accepted and are there any [contribution guidelines](https://docs.github.com/en/github/building-a-strong-community/setting-guidelines-for-repository-contributors)?

OVERLORD added the enhancement label 2026-02-04 16:57:40 +03:00

OVERLORD closed this issue

2026-02-04 16:57:41 +03:00

OVERLORD commented

2026-02-04 16:57:52 +03:00

@meltyshev commented on GitHub (Feb 8, 2021):

Hi, sorry for the long answer. Yes, files should only be accessible to authorized users. I will change it in the release version. Thank you!

About contribution guidelines: I will add them after we release the stable version of Planka (currently working on that huge roles change). It will become more stable to contribute - there will be stable API and migrations between versions.

@meltyshev commented on GitHub (Feb 8, 2021): Hi, sorry for the long answer. Yes, files should only be accessible to authorized users. I will change it in the release version. Thank you! About contribution guidelines: I will add them after we release the stable version of Planka (currently working on that huge roles change). It will become more stable to contribute - there will be stable API and migrations between versions.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/planka#65