Guest cannot upload files to Drive despite having CreateFile permission
Hi Huly team,
I am using Huly v0.7.426 and I have found what appears to be a permissions issue with Guest users and Drive.
Current setup
I created a custom role for a Drive space type and assigned the following permissions, including:
CreateFile- read/access permissions required for the Drive
I then assigned this custom role to a Guest user.
However, the Guest user still cannot upload a file to the Drive using “+ Upload File”.
Important comparison
I tested the exact same Drive and permissions with an Employee user:
- Employee + the same Drive role → upload works
- Guest + the same Drive role → upload does not work
Therefore, it does not appear to be a missing CreateFile permission in the Drive role. The difference seems to be the user's Guest status.
Expected behavior
If a Guest has a Drive role containing CreateFile, I would expect the Guest to be able to create/upload files in that Drive, without giving the Guest Employee-level access to the rest of the workspace.
For example, I would like to achieve:
Guest / Client
- Access to one specific Drive → yes
- Read files → yes
- Upload files → yes
- Access to other workspace modules/spaces → no
- Employee-level permissions → no
Is there an additional Guest permission or security check that prevents CreateFile from working for Guest users?
If so, where is this permission configured?
If this is currently not supported, is this a known limitation or bug?
Related functionality
I noticed that Huly already has configurable Guest permissions and Drive permissions, and that Guest Spaces were added in v0.7.423.
I would also like to ask whether there are plans for a more granular Client/Customer role where an administrator could define exactly which Spaces/modules a client can access and what they can do there.
For example:
Client role
- Drive A → read + upload
- Documents → read only
- CRM → access only to assigned records
- Tracker → no access
- HR → no access
- Chat → optional
- Other Spaces → no access
This would allow Huly to be used properly for external clients without giving them Employee access.
Thanks!
Source: hcengineering/platform