[GeoNode-users] Assets and permissions

[Cholena Smart]

Hi,

I've noticed that the new Assets tab allows downloading the original
uploaded dataset file, even when the resource permissions I've set should
restrict access. For example, if I only grant view permission to anonymous
users, they can still download the data via the Assets tab (and also
through the API).

Is there a way to make the Assets respect the same permissions set on the
resource? Have I missed something in my configuration?

I'm using dockerised GeoNode 4.4.1 (tested in 4.4.2 also).

Thanks,
Cholena
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/geonode-users/attachments/20250417/796a4dc2/attachment.htm>