From 106f9d90f5887fb365c16be51ab8a7301ad07096 Mon Sep 17 00:00:00 2001
From: chenos <chenlinxh@gmail.com>
Date: Sat, 17 Jun 2023 21:53:49 +0800
Subject: [PATCH] fix(file-manager): only allow logged-in users to upload files

---
 packages/plugins/file-manager/src/server/server.ts | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/packages/plugins/file-manager/src/server/server.ts b/packages/plugins/file-manager/src/server/server.ts
index 6ce533efc..37aa47d83 100644
--- a/packages/plugins/file-manager/src/server/server.ts
+++ b/packages/plugins/file-manager/src/server/server.ts
@@ -45,7 +45,8 @@ export default class PluginFileManager extends Plugin {
 
     initActions(this);
 
-    // this.app.acl.allow('attachments', 'upload', 'loggedIn');
+    this.app.acl.allow('attachments', 'upload', 'loggedIn');
+    this.app.acl.allow('attachments', 'create', 'loggedIn');
 
     // this.app.resourcer.use(uploadMiddleware);
     // this.app.resourcer.use(createAction);