**As a** normal project member with permissions to see attachments
Begin of the insertion**When** my OpenProject instance migrates from 12.1 to 12.2
End of the insertion **I want** to automatically get the necessary permissions
**So that** I can work with Nextcloud FileLinks in a way similar to attachments

also:

**As a** user managing a project
**I want** to automatically get the necessary permissions
**So that** I can also manage project storages

**Acceptance criteria**

* After installing the "storages" module, users should be able work with permissions as described above

**Notes**

There is a potential conflict between usability and security

**Rules to implement**

* Begin of the insertionUsersEnd of the insertion Begin of the deletion UserEnd of the deletion with the right to **select\_project\_modules** (add/remove modules from a project) should also get **manage\_project\_storages** (add/remove storages to/from a project). This is important for usability with very little security risk Begin of the insertion(as judged by Wieland).End of the insertion Begin of the deletion (Wieland).End of the deletion
* Begin of the insertionUsersEnd of the insertion Begin of the deletion UserEnd of the deletion with the right to **view\_work\_packages** should also get **view\_file\_links**.
* Begin of the insertionUsersEnd of the insertion Begin of the deletion ToDo: What about **manage\_file\_links**? Set these to usersEnd of the deletion with Begin of the insertionthe right to **edit\_work\_packages** should also get the right to **manage\_file\_links.**End of the insertion Begin of the deletion **edit\_work\_packages**?End of the deletion

**Reference**: Permissions defined the Storages module:

* manage\_file\_links
* view\_file\_links
* manage\_storages\_in\_project