# Restrict uploads
**URL:** https://meta.discourse.org/t/restrict-uploads/112688
**Category:** Theme component
**Created:** [March 27, 2019, 11:03am UTC](https://meta.discourse.org/t/restrict-uploads/112688 "2019-03-27T11:03:40Z")
**Posts on this page:** 20
**Page:** 1
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [March 27, 2019, 11:03am UTC](https://meta.discourse.org/t/restrict-uploads/112688/1 "2019-03-27T11:03:40Z")
This is a very small theme component that will remove the upload button from the composer toolbar and disable drag-and-drop uploading for users that are under a specified trust level.
### Illustration
### Settings
| | | |
| --- | --- | --- |
| š | **Repository** | [github.com/tshenry/discourse-restrict-uploads](https://github.com/tshenry/discourse-restrict-uploads) |
| š | **New to Discourse Themes?** | [Beginnerās guide to using Discourse Themes](https://meta.discourse.org/t/beginners-guide-to-using-discourse-themes/91966) |
Install this theme component
---
### Author:  [@YTPMania\_Forums](https://meta.discourse.org/u/YTPMania_Forums)
#### Post date: [March 30, 2019, 5:43pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/2 "2019-03-30T17:43:28Z")
My forum is pushing 1.1GB in uploaded media. Weāre growing in a way I wasnāt super prepared for and have been trying to coerce users to use places like imgur instead. This really, really helps!
---
### Author:  [@PoojaPatel](https://meta.discourse.org/u/PoojaPatel)
#### Post date: [October 2, 2019, 10:33am UTC](https://meta.discourse.org/t/restrict-uploads/112688/3 "2019-10-02T10:33:41Z")
I have try this components but its not working.
Can @tshenry help me?
This are the screen shot of my installation. I want to restrict user who have trust level 2 or below
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [October 2, 2019, 3:22pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/4 "2019-10-02T15:22:40Z")
Hi there š
I just checked and it appears to be working correctly. Can you make sure you have added the Restrict Uploads component to your main theme? You will also need to hard-refresh the page for the component to take effect. Oh, and make sure the account you are using for testing is not a staff user.
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [November 14, 2019, 10:19pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/5 "2019-11-14T22:19:01Z")
> ā A note to anyone using this component - there is an update to the component that requires you to be running the latest tests-passed version of Discourse. If your Discourse site is not up to date, DO NOT update the component as it will reference core code that you do not have yet which will break the composer functionality of your site.
---
### Author:  [@Iceman](https://meta.discourse.org/u/Iceman)
#### Post date: [August 24, 2020, 3:58pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/6 "2020-08-24T15:58:30Z")
Hi,
Just posting to note this:
> [@Unable to see the Text Box on the Composer after update to 2.6.0.beta2](https://meta.discourse.org/t/unable-to-see-the-text-box-on-the-composer-after-update-to-2-6-0-beta2/161726/4):
>
> New post just to inform that, if I remove the Mod Status to a Mod User (that has this bug), after refreshing the page they will be able to write without issue, the box will appear. Which confirms that the issue only happens to Mods and Admins. But Iāve been combing down my plugins, also tried the ?safe\_mode=only\_official mode and it doesnāt change, only happens to Mods/Admins. Now, this is the fun part, while I was writing the lines above it came to me that āthe only difference is with Admin/ā¦
I _think_ it is broken (for Admins and Mods) on 2.6.0.beta2, but Iām unable to get more confirmation besides my own experience.
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [August 25, 2020, 1:49am UTC](https://meta.discourse.org/t/restrict-uploads/112688/7 "2020-08-25T01:49:34Z")
Thanks so much for the report @Iceman! I just pushed a fix that should get things back on track š
Let me know if there are any issues after you update the component.
[https://github.com/tshenry/discourse-restrict-uploads/commit/b52fb9def1a00773ca4462e2d15444eea1ff934c](https://github.com/tshenry/discourse-restrict-uploads/commit/b52fb9def1a00773ca4462e2d15444eea1ff934c)
---
### Author:  [@Iceman](https://meta.discourse.org/u/Iceman)
#### Post date: [August 25, 2020, 2:36am UTC](https://meta.discourse.org/t/restrict-uploads/112688/8 "2020-08-25T02:36:29Z")
Just tested and works just as before, that is, like a charm!
Thank you very much!
---
### Author:  [@Jennifer\_Abrams](https://meta.discourse.org/u/Jennifer_Abrams)
#### Post date: [March 26, 2021, 3:52pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/9 "2021-03-26T15:52:16Z")
doesnāt restrict avi uploads
would be nice if it did
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [March 26, 2021, 7:30pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/10 "2021-03-26T19:30:13Z")
Can you elaborate a little more?
I just tried uploading an AVI from a trust level lower than the one defined in the `restrict to trust level` theme setting and it prevented the upload as expected.
If you would like to prevent non-staff users from uploading AVI files specifically, you should ensure the AVI extension isnāt added to `authorized extensions`. You can add the extension to
`authorized extensions for staff` if you want staff to be able to upload AVIs.
---
### Author:  [@yhmtsai](https://meta.discourse.org/u/yhmtsai)
#### Post date: [September 6, 2021, 9:41pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/11 "2021-09-06T21:41:32Z")
it is really cool.
Could it separate the restriction between post and personal message?
for example, only allow staff upload image in personal message but tl2 can upload images in normal post
---
### Author:  [@Iceman](https://meta.discourse.org/u/Iceman)
#### Post date: [September 10, 2021, 1:06pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/12 "2021-09-10T13:06:22Z")
Hey, just want to point out that this ābreaksā with Discourse Latest ( 2.8.0.beta6 ([0d809197aa](https://github.com/discourse/discourse/commits/0d809197aaa567629ebbfe1201948e91f38cea3a)) ).
`TypeError: null is not an object (evaluating Ā“this.mobileUploadButton.addEventListenerĀ“)`
#### Details:
- Started to happen after a Rebuild (and therefore, update to latest).
- This only happens on Mobile.
- Doesnāt happen on all browsers, neither on all devices (could be a cache thing? idk). But once it happens there is no way to āfix itā from a userās perspective.
- The behavior is weird because it āchangesā how the buttons behave. The ādiscardā button (trash can) and Preview buttons reload the page. The āDiscourse Gifs Theme Componentā Button just expands the composer.
- I thought it was some compatibility issue with the āDiscourse Gifsā Theme Component but if I disable that one the issue persists.
I can provide more details if necessary. I tried removing as much as possible but it seems that he problem only stops happening after disabling this Theme Component.
* * *
btw, just want to use the opportunity and point out what a great Theme Component this is and how much I do think that it should be a core feature š
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [September 10, 2021, 8:03pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/13 "2021-09-10T20:03:59Z")
> [@Iceman](#):
>
> Hey, just want to point out that this ābreaksā with Discourse Latest
Thanks for reporting this! There has been some recent work on our core upload system and there appears to be a little bug. Iām actually able to reproduce the error even without the component under the right circumstances. Iāll pass this by the engineer thatās been focusing on uploads to see if we can get this fixed up!
> [@yhmtsai](#):
>
> Could it separate the restriction between post and personal message?
That sounds like a reasonable feature request! Iāll see what I can do.
---
### Author:  [@martin](https://meta.discourse.org/u/martin)
#### Post date: [September 12, 2021, 11:51pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/15 "2021-09-12T23:51:52Z")
Hi @Iceman. Thanks for the report, the issue is fixed by [FIX: Do not error mobile upload button if !allowUpload by martin-brennan Ā· Pull Request #14317 Ā· discourse/discourse Ā· GitHub](https://github.com/discourse/discourse/pull/14317) which is in tests-passed now.
---
### Author:  [@Crius](https://meta.discourse.org/u/Crius)
#### Post date: [January 8, 2024, 4:15pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/16 "2024-01-08T16:15:10Z")
I am noticing this message in console.
> [THEME 6 āRestrict Uploadsā] To prevent errors in tests, add a `pluginId` key to your `modifyClass` call. This will ensure the modification is only applied once.
Just thought to raise it as it may become a potential issue once the [recent changes](https://meta.discourse.org/t/preparing-for-discourses-upgrade-to-ember-5/287211) go live for everyone.
---
### Author:  [@Arkshine](https://meta.discourse.org/u/Arkshine)
#### Post date: [January 8, 2024, 4:34pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/17 "2024-01-08T16:34:44Z")
Thanks for the report. I made a PR š
[https://github.com/tshenry/discourse-restrict-uploads/pull/1](https://github.com/tshenry/discourse-restrict-uploads/pull/1)
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [January 8, 2024, 8:44pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/18 "2024-01-08T20:44:27Z")
š Merged, thanks!
---
### Author:  [@hipp0](https://meta.discourse.org/u/hipp0)
#### Post date: [January 23, 2026, 8:57pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/22 "2026-01-23T20:57:44Z")
Place holder text is different for users under that arenāt in the allowed Trust Level Group
composer.reply\_placeholder\_no\_images
Added for Trust Level 0,1,2, I have Restrict uploads set to Trust Level 3.
> [@Place holder text in new topic or reply is wrong (Composer.reply\_placeholder\_no\_images)](https://meta.discourse.org/t/place-holder-text-in-new-topic-or-reply-is-wrong-composer-reply-placeholder-no-images/394225/2):
>
> Does it also happen is [safe mode](https://meta.discourse.org/t/53504?silent=true)?
---
### Author:  [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [January 23, 2026, 11:35pm UTC](https://meta.discourse.org/t/restrict-uploads/112688/23 "2026-01-23T23:35:40Z")
I think I was able to fix the placeholder so it works with RTE and Markdown editor
[https://github.com/tshenry/discourse-restrict-uploads/pull/3](https://github.com/tshenry/discourse-restrict-uploads/pull/3)
---
### Author:  [@tshenry](https://meta.discourse.org/u/tshenry)
#### Post date: [January 24, 2026, 12:13am UTC](https://meta.discourse.org/t/restrict-uploads/112688/24 "2026-01-24T00:13:30Z")
The fix has been merged š Thanks again, @Moin! If you end up working on the additional modernization, ping me when itās ready and Iāll work on getting it merged.
[Next page](https://meta.discourse.org/t/restrict-uploads/112688.md?page=2)