feature request #7018
Updated by Andreas Kohlbecker over 6 years ago
SpecimenOrObservationBase need to be protected by a SpecimenOrObservationBaseVoter which evaluates CRUD permissions given to users or Groups. ## Permissions and the derivation hierachy If a per entity authority for a SpecimenOrObservationBase is given to a user the hierarchy of the DerivedUnits becomes important In case of the Phycobank project a per entity authority is given for the FieldUnit and which will be intrinsically be propagated to the whole derivation tree. This approach seems to be sufficient for most project workflows. If user is not having the permission to edit the whole derivation tree it can be granted to edit a specific DerivedUnit and will then be able to create and modify all units which are derivates of the one he is allowed to edit.