feature request #3097
closeddisable editors if a user has insufficient grants for a taxon or taxon node.
30%
Description
belongs to #3095
TaxonNodes must only be enabled if a user has the full CRUD permissions on the classification subtree.
Formerly it was not possible to test this feature ("Currently this can not be tested due to the bug #3098 "CdmPermissionEvaluator can test for multiple permissions"), but this requirement is no longer valid, so testing is possible.
Still difficult to test due to #4300 (authority form does not work under windows)
Related issues
Updated by Andreas Kohlbecker over 11 years ago
- Status changed from New to In Progress
Updated by Andreas Kohlbecker over 11 years ago
for now the user will be granted to edit taxa the user has the permission UPDATE on the cdm entities in question. This can be easily changed afterwards to full CRUD permissions ALL}} since the required permissions are centralized in {{{eu.etaxonomy.taxeditor.security.RequiredPermissions
Updated by Andreas Kohlbecker over 11 years ago
first bits implemented TaxonEditor disabled, views still to do: r16009
Updated by Andreas Kohlbecker over 11 years ago
- Status changed from In Progress to Resolved
- Assignee changed from Andreas Kohlbecker to Andreas Müller
done r16012 r16013
Updated by Andreas Müller over 9 years ago
- Priority changed from Priority08 to Highest
Updated by Andreas Müller about 4 years ago
- Related to feature request #3095: protect taxa and nodes added
Updated by Andreas Müller about 4 years ago
- Tags set to security, permission
- Description updated (diff)
- Status changed from Resolved to Feedback
- Assignee changed from Andreas Müller to Katja Luther
- Target version changed from 120 to Release 5.15
I am not sure if I understand what is meant here with "enabled".
Currently it seems possible to open a taxon but not to enter data in the details view for the name editor.
But it is possible to add new factual data but not all of them are editable in the details view (e.g. TextData text is not editable while Time scope is editable).
So there seem to be open issues. This is maybe also related to the problem that 2 dimensional rights are currently not yet fully implemented (e.g. rights to enter only factual data for a certain taxonomic subtree).
I give this ticket to KL as she is currently in charge for TaxEditor issues. Please discuss who should work on it. I also change milestone as the old milestone should be removed.
Updated by Katja Luther almost 4 years ago
- Target version changed from Release 5.15 to Release 5.18
Updated by Andreas Müller almost 4 years ago
- Related to bug #9021: Feedback for missing rights on TaxonNode missing added
Updated by Katja Luther almost 4 years ago
- Status changed from Feedback to Worksforme
- Target version deleted (
Release 5.18)
Andreas Müller wrote:
I am not sure if I understand what is meant here with "enabled".
Currently it seems possible to open a taxon but not to enter data in the details view for the name editor.But it is possible to add new factual data but not all of them are editable in the details view (e.g. TextData text is not editable while Time scope is editable).
So there seem to be open issues. This is maybe also related to the problem that 2 dimensional rights are currently not yet fully implemented (e.g. rights to enter only factual data for a certain taxonomic subtree).I give this ticket to KL as she is currently in charge for TaxEditor issues. Please discuss who should work on it. I also change milestone as the old milestone should be removed.
Now it is not possible to enter factual data anymore (this was tested for a user with Editor and Allow_for_Polygonaceae rights in Caryophyllales_spp) it was implemented for #8239
Updated by Katja Luther almost 4 years ago
- Related to feature request #8239: Rights issues in TaxEditor added