Link / file picker doesn't seem to respect folder permissions

[ajplopez]

I'm submitting a

[x] bug report => search github for a similar issue before submitting

...about

[x] edit experience / UI

Current Behavior / Expected Behavior

When a content editor with a certain role browses the File Manager, they see all the folders in the file system (regardless of the folder's permissions in Site Assets)

But I would expect that they could only see folders of which they have permission to view.

If I have a folder in the root of the site called "DeptFiles" and inside that I have "Finances", and then on "Finances" we make it so that not all users can view it.

If you're a certain type of user, you would only see the folder that you're allowed to see.

I'm working on a website where there will be many Departments, each with their own role and set of users. They also have a folder in Site Assets for each department. I want it so that when a user with a certain role goes to add/edit files, they can only access the folder that belongs to their department.

Instructions to Reproduce the Problem

1. Create a role called "Finances" and a role called "Attorney"
2. Assign a user to that role "Finances"
3. Create a folder on the root of the portal and set the permissions of that folder (via Site Assets) so that only that role can view / browse / write to. Add more folders to this area and configure them so that Finances has a folder, and Attorney has a folder
4. Create an app that has a Link field that targets the "File Manager" and let the new roles be able to edit this
5. Log in with your new user (the one with the Finances role) and go to edit the content
6. When you browse the File Manager, you'll see all the other folders in that, not only the Finances folder

I would think that the

Your environment

• 2sxc version(s): 16.7.0
• Browser: all |
• DNN: 9.13
• Hosting platform: all | IIS | azure | other
• Language: English