[wp-trac] [WordPress Trac] #23391: User in contributor role can add images to post only via the text editor

[WordPress Trac]

#23391: User in contributor role can add images to post only via the text editor
-----------------------------+---------------------------------
 Reporter:  mark-k           |       Owner:  (none)
     Type:  enhancement      |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Role/Capability  |     Version:
 Severity:  normal           |  Resolution:
 Keywords:  needs-patch      |     Focuses:  ui, administration
-----------------------------+---------------------------------

Comment (by danielbachhuber):

 This came up again
 [https://github.com/WordPress/gutenberg/pull/9301#issuecomment-424814801
 in the context of Gutenberg]:

 > this logic applies to Contributors and un-customized sites, but what
 about a situation where a developer would want to lock down the
 permissions for users to upload but not to select from existing media? I
 can see many cases where administrators would not want new uploads but
 would want existing media to be selectable. I, myself, have this very need
 and this change would wipe out all usability of the media library within
 G'berg media blocks.

 I suggested:


 1. Introduce a new capability around viewing the media library
 (independent of `upload_files` but defaulting to `upload_files`).
 2. Audit core for references to `upload_files` that could be switched to
 the new capability.
 3. Update Gutenberg once the implementation is agreed upon for core.

 r41290 is existing prior art for plugins. I see the core audit as the bulk
 of the work for this ticket; not sure how simple it would be to introduce
 two states of the Media Library (view-only vs. view and upload).

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/23391#comment:4>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform