Project

General

Profile

feature request #3097

disable editors if a user has insufficient grants for a taxon or taxon node.

Added by Andreas Kohlbecker about 8 years ago. Updated 5 months ago.

Status:
Worksforme
Priority:
Highest
Assignee:
Category:
taxeditor
Target version:
-
Start date:
09/11/2012
Due date:
% Done:

30%

Severity:
normal

Description

belongs to #3095

TaxonNodes must only be enabled if a user has the full CRUD permissions on the classification subtree.

Formerly it was not possible to test this feature ("Currently this can not be tested due to the bug #3098 "CdmPermissionEvaluator can test for multiple permissions"), but this requirement is no longer valid, so testing is possible.

Still difficult to test due to #4300 (authority form does not work under windows)


Related issues

Related to Edit - feature request #3095: protect taxa and nodes New 09/11/2012
Related to Edit - bug #9021: Feedback for missing rights on TaxonNode missing New 05/18/2020
Related to Edit - feature request #8239: Rights issues in TaxEditor New 04/11/2019

History

#1 Updated by Andreas Kohlbecker about 8 years ago

  • Status changed from New to In Progress

#2 Updated by Andreas Kohlbecker about 8 years ago

for now the user will be granted to edit taxa the user has the permission UPDATE on the cdm entities in question. This can be easily changed afterwards to full CRUD permissions ALL}} since the required permissions are centralized in {{{eu.etaxonomy.taxeditor.security.RequiredPermissions

#3 Updated by Andreas Kohlbecker about 8 years ago

first bits implemented TaxonEditor disabled, views still to do: r16009

#4 Updated by Andreas Kohlbecker about 8 years ago

  • Status changed from In Progress to Resolved
  • Assignee changed from Andreas Kohlbecker to Andreas Müller

done r16012 r16013

#5 Updated by Andreas Müller about 6 years ago

  • Priority changed from Priority08 to Highest

#6 Updated by Andreas Müller 8 months ago

#7 Updated by Andreas Müller 8 months ago

  • Tags set to security, permission
  • Description updated (diff)
  • Status changed from Resolved to Feedback
  • Assignee changed from Andreas Müller to Katja Luther
  • Target version changed from 120 to Release 5.15

I am not sure if I understand what is meant here with "enabled".
Currently it seems possible to open a taxon but not to enter data in the details view for the name editor.

But it is possible to add new factual data but not all of them are editable in the details view (e.g. TextData text is not editable while Time scope is editable).
So there seem to be open issues. This is maybe also related to the problem that 2 dimensional rights are currently not yet fully implemented (e.g. rights to enter only factual data for a certain taxonomic subtree).

I give this ticket to KL as she is currently in charge for TaxEditor issues. Please discuss who should work on it. I also change milestone as the old milestone should be removed.

#8 Updated by Andreas Müller 8 months ago

  • % Done changed from 0 to 30

#9 Updated by Andreas Müller 8 months ago

  • Private changed from Yes to No

#10 Updated by Katja Luther 7 months ago

  • Target version changed from Release 5.15 to Release 5.18

#11 Updated by Andreas Müller 5 months ago

  • Related to bug #9021: Feedback for missing rights on TaxonNode missing added

#12 Updated by Katja Luther 5 months ago

  • Status changed from Feedback to Worksforme
  • Target version deleted (Release 5.18)

Andreas Müller wrote:

I am not sure if I understand what is meant here with "enabled".
Currently it seems possible to open a taxon but not to enter data in the details view for the name editor.

But it is possible to add new factual data but not all of them are editable in the details view (e.g. TextData text is not editable while Time scope is editable).
So there seem to be open issues. This is maybe also related to the problem that 2 dimensional rights are currently not yet fully implemented (e.g. rights to enter only factual data for a certain taxonomic subtree).

I give this ticket to KL as she is currently in charge for TaxEditor issues. Please discuss who should work on it. I also change milestone as the old milestone should be removed.

Now it is not possible to enter factual data anymore (this was tested for a user with Editor and Allow_for_Polygonaceae rights in Caryophyllales_spp) it was implemented for #8239

#13 Updated by Katja Luther 5 months ago

#14 Updated by Andreas Kohlbecker 5 months ago

  • Description updated (diff)

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 40 MB)