Task #11370 (new)
Opened 11 years ago
Last modified 8 years ago
Bug: HierarchyMoveAndPermissionsTest failed on dev_4_4
Reported by: | jburel | Owned by: | |
---|---|---|---|
Priority: | major | Milestone: | Permissions |
Component: | Services | Version: | 4.4.8 |
Keywords: | BACKPORT-4.4 | Cc: | ux@… |
Resources: | n.a. | Referenced By: | n.a. |
References: | n.a. | Remaining Time: | n.a. |
Sprint: | n.a. |
Description (last modified by jburel)
Data moves from RWRW to groups with lower permissions do not work for complex graph
e.g.
Dataset owned by user1 Image owned by user2 is added to Dataset by user2 user1 moves the Dataset to a private The Image is also moved but no longer accessible.
Change History (11)
comment:1 Changed 11 years ago by jburel
- Cc jamoore bpindelski added
comment:2 Changed 11 years ago by jburel
- Description modified (diff)
comment:3 Changed 9 years ago by mtbcarroll
- Owner set to mtbcarroll
comment:4 Changed 9 years ago by mtbcarroll
- Cc ux@… added; jamoore bpindelski removed
- Component changed from General to Services
- Milestone changed from 5.1.0 to 5.1.1
- Priority changed from critical to major
comment:6 Changed 9 years ago by mtbcarroll
One issue with HierarchyMoveAndPermissionsTest seems to be that presently group owners may not move others' data from those groups. Does UX have an opinion on how things should be? Jean-Marie probably knows the most about these tests and what should be done about them.
comment:7 Changed 9 years ago by mtbcarroll
- Milestone changed from 5.1.3 to 5.1.4
- Owner mtbcarroll deleted
Passing this for determination of what further should be done.
comment:8 Changed 9 years ago by jamoore
- Milestone changed from 5.1.4 to OMERO-5.1.4
Splitting 5.1.4 due to milestone decoupling
comment:9 Changed 8 years ago by jamoore
- Milestone changed from 5.x to Permissions
comment:10 Changed 8 years ago by sbesson
Referencing ticket #11258 has changed sprint.
comment:11 Changed 8 years ago by sbesson
Referencing ticket #11258 has changed sprint.
So, with current develop (shortly before 5.1.0), in a read-write group if Alice puts her images into Bob's dataset, then Bob moves that dataset to a private group, then Bob's dataset does move but Alice's images get left behind and remain accessible.
(It was interesting that I couldn't figure out how to test this with our default create_users setup nor in the Web client, I needed a custom setup and Insight.)
There are certainly still issues here -- especially probably relating to what group owners may do -- but at least images are not being rendered inaccessible any more by other users, so the remaining issues with HierarchyMoveAndPermissionsTest can become part of the larger permissions review after 5.1.0.