Task #12270 (closed)
Opened 10 years ago
Closed 10 years ago
Bug: web tag read-only
| Reported by: | wmoore | Owned by: | aknab |
|---|---|---|---|
| Priority: | blocker | Milestone: | 5.0.2 |
| Component: | Web | Version: | n.a. |
| Keywords: | n.a. | Cc: | ux@… |
| Resources: | n.a. | Referenced By: | n.a. |
| References: | n.a. | Remaining Time: | n.a. |
| Sprint: | n.a. |
Description
With the new Tagging dialog (https://github.com/openmicroscopy/openmicroscopy/pull/2337) in a read-only group Tags belonging to other users are shown in the dialog, even though permissions don't allow me to add them. If I choose another users' tags and hit Save, I get a Security Violation.
Change History (6)
comment:1 Changed 10 years ago by aknab
comment:2 Changed 10 years ago by wmoore
Simply don't show tags that cannot be added (that's what Insight does).
comment:3 Changed 10 years ago by jburel
only show the tags that can be added
comment:4 Changed 10 years ago by pwalczysko
We have the same problem in Private group as well.
Workflow:
- login to gretzky as user-1 (owner of private group)
- you will see in the dialog also tags not belonging to you -> if you select them and Save, error appears
comment:5 Changed 10 years ago by aknab
comment:6 Changed 10 years ago by aknab
- Resolution set to fixed
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.
You may also have a look at Agilo extensions to the ticket.
What is the desired behavior?