FeatureFuel
25

Restrict "Show Hidden Collections" to Admin Users

Source: directus/directus#24559 · opened by @Ayo91
Summary Currently, any user can right-click in the collections list and reveal "hidden collections." This behavior may expose sensitive collections to users who should not have access to them. The ability to reveal hidden collections should be restricted to admin users only to ensure proper access control. Basic Example 1. A user with admin permissions right-clicks in the collections list. 2. The context menu shows the option "Show Hidden Collections." 3. A non-admin user right-clicks in the same area. 4. The "Show Hidden Collections" option is not displayed. Motivation • Improves security by preventing unauthorized users from accessing hidden collections. • Ensures permission-based behavior, making hidden collections truly restricted unless explicitly granted access. • Reduces accidental exposure of collections that should remain hidden from certain user roles. Detailed Design Modify the logic behind the right-click context …

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests