{"action":"opened","issue":{"url":"https://api.github.com/repos/hacdias/caddy-filemanager/issues/83","repository_url":"https://api.github.com/repos/hacdias/caddy-filemanager","labels_url":"https://api.github.com/repos/hacdias/caddy-filemanager/issues/83/labels{/name}","comments_url":"https://api.github.com/repos/hacdias/caddy-filemanager/issues/83/comments","events_url":"https://api.github.com/repos/hacdias/caddy-filemanager/issues/83/events","html_url":"https://github.com/hacdias/caddy-filemanager/issues/83","id":220879616,"number":83,"title":"filemanager: can't disallow new file upload with basicauth","user":{"login":"windymindy","id":7114595,"avatar_url":"https://avatars3.githubusercontent.com/u/7114595?v=3","gravatar_id":"","url":"https://api.github.com/users/windymindy","html_url":"https://github.com/windymindy","followers_url":"https://api.github.com/users/windymindy/followers","following_url":"https://api.github.com/users/windymindy/following{/other_user}","gists_url":"https://api.github.com/users/windymindy/gists{/gist_id}","starred_url":"https://api.github.com/users/windymindy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/windymindy/subscriptions","organizations_url":"https://api.github.com/users/windymindy/orgs","repos_url":"https://api.github.com/users/windymindy/repos","events_url":"https://api.github.com/users/windymindy/events{/privacy}","received_events_url":"https://api.github.com/users/windymindy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-04-11T08:44:37Z","updated_at":"2017-04-11T08:44:37Z","closed_at":null,"body":"1. What version of Caddy are you running (caddy -version)?\r\n\r\nCADDY 0.9.5 32-bit for windows\r\n\r\n2. What are you trying to do?\r\n\r\nI was checking https://caddyserver.com/docs/filemanager example with bassicauth right at the bottom of the doc.\r\n\r\n3. What is your entire Caddyfile?\r\n\r\nfilemanager /admin {\r\nshow ./\r\nallow_commands false\r\nadmin:\r\nallow_commands true\r\nallow_command rm\r\nallow_command mv\r\nallow dotfiles\r\nmanager:\r\nblock /admin/financial\r\neditor:\r\nallow_new false\r\nblock /admin/financial\r\n}\r\n\r\nbasicauth /admin admin pass\r\nbasicauth /admin manager pass\r\nbasicauth /admin editor pass\r\n\r\n4. How did you run Caddy (give the full command and describe the execution environment)?\r\n\r\n5. Please paste any relevant HTTP request(s) here.\r\n\r\n6. What did you expect to see?\r\n\r\nI expected user editor not to be able to upload new files through filemanager.\r\n\r\n7. What did you see instead (give full error messages and/or log)?\r\n\r\nDespite what is said in the doc, editor can successfuly upload new files.\r\n\r\n8. How can someone who is starting from scratch reproduce the bug as minimally as possible?\r\n\r\nJust run Caddy with sample Caddyfile. Navigate to /admin, enter editor/pass credentials and drag any file into browser window or press Upload button."}}
{"actor":{"display_login":"windymindy"}}