I have a notice board app. I have 2 versions, an admin version to upload notices and a viewing only version.
I do not want anyone with the viewing only version to have the ability to upload notices.
I use a file picker to upload pdf files and an image component to display a generated image from that pdf. The image action is set to enlarge image.
The file picker is only available in the admin version.
But I just discovered that anyone can just drag and drop anything on to the image component and it replaces the legitimate notice!
Someone please tell me there is a fix for this?