fix: enhance error messaging for file URL retrieval and add permission checks for download actions

Author: yaroslav8765

custom/uploader.vue

@@ -141,12 +141,12 @@ onMounted(async () => {
     });
     if (resp.error) {
         adminforth.alert({
-          message: t('Error getting file url'),
+          message: t('Error getting file url for firld {field}:', { field: props.meta.pathColumnName }),
           variant: 'danger'
         });
       return;
     }
-     const filename = resp.url.split('/').pop()?.split('?')[0] || `file`;
+    const filename = resp.url.split('/').pop()?.split('?')[0] || `file`;
     const filenameParts = filename.split('.');
     const extension = filenameParts.length > 1 ? filenameParts.pop() : '';
     const nameWithoutExt = filenameParts.join('.');
@@ -158,9 +158,6 @@ onMounted(async () => {
     const res = await fetch(resp.url);
     const fileBlob = await res.blob();
     const file = new File([fileBlob], newFileName, { type: fileBlob.type });
-    if (!file) {
-      return;
-    }
     onFileChange({
       target: {
         files: [file],

index.ts

@@ -3,6 +3,8 @@ import { PluginOptions } from './types.js';
 import { AdminForthPlugin, AdminForthResourceColumn, AdminForthResource, Filters, IAdminForth, IHttpServer, suggestIfTypo } from "adminforth";
 import { Readable } from "stream";
 import { RateLimiter } from "adminforth";
+import { interpretResource } from 'adminforth';
+import { ActionCheckSource } from 'adminforth'; 
 
 const ADMINFORTH_NOT_YET_USED_TAG = 'adminforth-candidate-for-cleanup';
 
@@ -436,11 +438,16 @@ export default class UploadPlugin extends AdminForthPlugin {
         if (!filePath) {
           return { error: 'Missing filePath' };
         }
-        const url = await this.options.storageAdapter.getDownloadUrl(filePath, 1800);
+        const allowedActions = await interpretResource( adminUser, this.resourceConfig, '', ActionCheckSource.CustomActionRequest, this.adminforth  )
+        console.log('allowedActions', allowedActions);
+        if (allowedActions.allowedActions.create === true || allowedActions.allowedActions.edit === true) {
+          const url = await this.options.storageAdapter.getDownloadUrl(filePath, 1800);
 
-        return {
-          url,
-        };
+          return {
+            url,
+          };
+        }
+        return { error: 'You do not have permission to download this file' };
       },
     });