Loss of Permisions for Network Events Admins

[JimPGlenn]

This is something that I have reported in the past and I thought we released a fix for it already. Either way, it seems that the Network Events Admins (GSA group: NetworkEventsAdmins) security group has lost the ability to add/edit Network Events. Please take a look.

reference old ticket number
https://bugs.launchpad.net/karl3/+bug/558679

[JimPGlenn (jpglenn09)]

this ticket added via rt # http://rt01.sixfeetup.com/Ticket/Display.html?id=80129

[Paul Everitt (paul-agendaless)]

I went to:

  https://karl.soros.org/offices/files/network-events/edit_acl.html

...and saw that there doesn't seem to be info about a NetworkEvents group. Not sure if there was originally.

According to a June 4 copy of the GSA XML, sflood and dmiller have:

            <group>
                <id>732</id>
                <title>group.NetworkEventsAdmins</title>
            </group>

Nat also says that khlez should now have that group.

I'll mark this one as High just because we might be able to quickly fix it TTW.

[Chris Rossi (chris-archimedeanco)]

The entry for group.NetworkEventsAdmins was present in the ACL but was after the entry: (Deny, Everyone, ('edit', 'delete'))

[Paul Everitt (paul-agendaless)]

Subscribed Nat to this. I'll leave it as "Fix Resolved" as we fixed the actual reported bug, but we're now just discussing the KARL security model.

Nat would like a setting where Network News/Events admins are allowed to do operations on things in the container, but not on the container itself. Specifically, prevent them from deleting the folder (network-news or network-events) or visiting Advanced.

I spoke to Chris about this and he's mostly certain that KARL3 has never provided that as an option. That is, having a different set of permissions for the container versus things in the container. But he's doing research on it to see.

[Nat Katin-Borland (nborland)]

Cool - thanks!

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>] On Behalf Of
Paul Everitt
Sent: Tuesday, June 15, 2010 5:33 PM
To: Nathaniel Katin-Borland
Subject: [Bug 594180] Re: Loss of Permisions for Network Events Admins

Subscribed Nat to this. I'll leave it as "Fix Resolved" as we fixed the
actual reported bug, but we're now just discussing the KARL security
model.

Nat would like a setting where Network News/Events admins are allowed to
do operations on things in the container, but not on the container
itself. Specifically, prevent them from deleting the folder (network-
news or network-events) or visiting Advanced.

I spoke to Chris about this and he's mostly certain that KARL3 has never
provided that as an option. That is, having a different set of
permissions for the container versus things in the container. But he's
doing research on it to see.

--
Loss of Permisions for Network Events Admins
https://bugs.launchpad.net/bugs/594180
You received this bug notification because you are a direct subscriber
of the bug.

Status in KARL3: Fix Released

Bug description:

This is something that I have reported in the past and I thought we
released a fix for it already. Either way, it seems that the Network
Events Admins (GSA group: NetworkEventsAdmins) security group has lost
the ability to add/edit Network Events. Please take a look.

reference old ticket number
https://bugs.launchpad.net/karl3/+bug/558679

To unsubscribe from this bug, go to:
https://bugs.launchpad.net/karl3/+bug/594180/+subscribe

[Chris Rossi (chris-archimedeanco)]

As it turns out the delete permission does only apply to the children of a container and not the container itself. In other words, in the Network News and Network Events folders the admins are able only to delete news and events items and not the entire folder. There is, however, a UI bug where the 'Delete' button is shown erroneously on the folder when the user does not actually have permission to delete the folder. Re-opening this ticket to fix that bug.

[Nat Katin-Borland (nborland)]

Good to know because I could have sworn that the Delete didn't used to
show up for people...

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>] On Behalf Of
Chris Rossi
Sent: Tuesday, June 15, 2010 6:13 PM
To: Nathaniel Katin-Borland
Subject: [Bug 594180] Re: Loss of Permisions for Network Events Admins

As it turns out the delete permission does only apply to the children of
a container and not the container itself. In other words, in the
Network News and Network Events folders the admins are able only to
delete news and events items and not the entire folder. There is,
however, a UI bug where the 'Delete' button is shown erroneously on the
folder when the user does not actually have permission to delete the
folder. Re-opening this ticket to fix that bug.

** Changed in: karl3
       Status: Fix Released => In Progress

--
Loss of Permisions for Network Events Admins
https://bugs.launchpad.net/bugs/594180
You received this bug notification because you are a direct subscriber
of the bug.

Status in KARL3: In Progress

Bug description:

This is something that I have reported in the past and I thought we
released a fix for it already. Either way, it seems that the Network
Events Admins (GSA group: NetworkEventsAdmins) security group has lost
the ability to add/edit Network Events. Please take a look.

reference old ticket number
https://bugs.launchpad.net/karl3/+bug/558679

To unsubscribe from this bug, go to:
https://bugs.launchpad.net/karl3/+bug/594180/+subscribe

[JimPGlenn (jpglenn09)]

fixed