Feature / Security permissions: Attached media

[MikeKry]

We should allow update Media AdminController actions to allow Upload and GetMediaItem with ManageAttachedMediaFieldsFolder . Without need of ManageMedia permission.

Is your feature request related to a problem?

There is a case, when you do not want user to see mdia library. But there is no combination of permissions, that allow to upload media / upload attached media without showing all media library content.

Describe the solution you'd like

Allow user to upload / get item with ManageAttachedMediaFieldsFolder permission only.

Or create separate permission for displaying media library.

[gvkries]

This seems to be a bug, grating ManageAttachedMediaFieldsFolder should work without having access to the media library IMHO.

[github-actions]

We triaged this issue and set the milestone according to the priority we think is appropriate (see the docs on how we triage and prioritize issues).

This indicates when the core team may start working on it. However, if you'd like to contribute, we'd warmly welcome you to do that anytime. See our guide on contributions here.