**As a** normal project member with permissions to see attachments
**I want** to automatically get the necessary permissions
**So that** I can work with Nextcloud FileLinks in a way similar to attachments

also:

**As a** user managing a project
**I want** to automatically get the necessary permissions
**So that** I can also manage project storages Begin of the insertion

End of the insertion Begin of the deletion



End of the deletion **Acceptance criteria**

* After installing the "storages" module, users should be able work with permissions as described above

**Notes**

There is a potential conflict between usability and security

**Rules to implement**

* User with the right to **select\_project\_modules** (add/remove modules from a project) should also get **manage\_project\_storages** (add/remove storages to/from a project). This is important for usability with very little security risk (Wieland).
* User with the right to **view\_work\_packages** should also get **view\_file\_links**.
* ToDo: What about **manage\_file\_links**? Set these to users with **edit\_work\_packages**?

**Reference**: Permissions defined the Storages module:

* manage\_file\_links
* view\_file\_links
* manage\_storages\_in\_project