Los usuarios que no están en los grupos permitidos de publicaciones de medios incrustados pueden eludir la restricción de carga copiando el enlace de la imagen cargada.

Error
1

Steps to Reproduce

  1. Set Newuser max embedded media = 0
  • This correctly prevents new users from uploading images before they upload them :white_check_mark:
  1. Configure Embedded media post allowed groups
  • Exclude certain groups from the allowed list
  • When a user not in the allowed groups uploads an image:
    • The image can appear in the editor
    • Only when submitting the post is it blocked :cross_mark:
  1. Problem
  • During editing, the user can copy the link of the uploaded image to bypass the upload restriction and post it

Expected Behavior

Our goal is to prevent users from uploading images. Users not in the allowed groups should not be able to insert any embedded media into the editor at all — it should block uploads at the time of uploading, just like when Newuser max embedded media = 0 is applied.

Otherwise they can copy the link of the uploaded image and effectively bypass the restriction to upload it.