Attachments added by portfolio author on private replies to comments can't be seen by feedback giver
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mahara |
Confirmed
|
Medium
|
Unassigned |
Bug Description
Precondition: threaded comments is set up.
When the portfolio owner, OwnerA, replies privately to a comment made by someone else, Commenter1, and includes a file attachment, Commenter1 cannot see the attachment because Commenter1 wasn't the one who added the attachment to the private comment. Commenter1 can see the comment because it's a reply to a comment they had made. But the file sits in the file area of OwnerA and because it's a private comment that they made is not visible to Commenter1.
That shouldn't be the case. When someone responds to a private comment in a conversation that they've been involved in, they should also be able to see any associated attachments.
To replicate:
1. Site admin enables threaded comments in the institution in which OwnerA and Commenter1 are members of.
2. OwnerA sets up a portfolio page.
3. Commenter1 leaves a private comment on the page.
4. OwnerA replies to that comment and attaches an attachment.
5. Commenter1 can see the comment.
Expected result: They also have access to the attachment to download it.
Actual result: They can't access the attachment.