25
Restrict "Show Hidden Collections" to Admin Users
Source: directus/directus#24559 · opened by @Ayo91
Summary Currently, any user can right-click in the collections list and reveal "hidden collections." This behavior may expose sensitive collections to users who should not have access to them. The ability to reveal hidden collections should be restricted to admin users only to ensure proper access control. Basic Example 1. A user with admin permissions right-clicks in the collections list. 2. The context menu shows the option "Show Hidden Collections." 3. A non-admin user right-clicks in the same area. 4. The "Show Hidden Collections" option is not displayed. Motivation • Improves security by preventing unauthorized users from accessing hidden collections. • Ensures permission-based behavior, making hidden collections truly restricted unless explicitly granted access. • Reduces accidental exposure of collections that should remain hidden from certain user roles. Detailed Design Modify the logic behind the right-click context …
No pledges yet. Be the first to back this.
Comments
Similar requests
Access Policy for Data Model / Content Collection Groups (Folders)
2 votes · 0 comments
Get all related collections/items for m2o,m2m without reverse fields
2 votes · 0 comments
Grant permissions on all user collections
1 vote · 0 comments
Collapse Database-Only Collections in Data Model page
2 votes · 0 comments
CLI command to clean/reset system collections
3 votes · 0 comments
No comments yet.