delete button visible on reference manuals listing
Bug #799888 reported by
Robert Marianski
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
KARL3 |
Won't Fix
|
Low
|
Chris Rossi |
Bug Description
The reference manuals root listing view checks the delete permission on the parent to see if if the user can delete the resource. This works for community views, but not when viewing the reference manual root listing. When viewing the reference manual root listing as a feature admin, the delete action is displayed, but the user does not have permission to delete the object. For the root reference manual listing, the delete permission should be checked on the object itself.
This can be seen when logged in as a featureadmin.
Changed in karl3: | |
importance: | Undecided → Medium |
importance: | Medium → Low |
assignee: | nobody → Nat Katin-Borland (nborland) |
assignee: | Nat Katin-Borland (nborland) → Chris Rossi (chris-archimedeanco) |
milestone: | none → m61 |
Changed in karl3: | |
milestone: | m61 → m62 |
To post a comment you must log in.
Robert,
As a matter of policy, the delete permission is always granted, or not, on the parent folder of the item. This is parallel to the add permission, as these are effectively folder operations. If a feature admin should not be able to delete the root reference manuals folder, they should not have the delete permission in NYC. Changing the heuristics of delete is neither convenient nor desirable, as it can cause confusion down the road if a permission can mean one thing in one context and another thing in a different context.
If you would like to work with me on the bigger picture of what it is you'd like to be able to do here, let me know and we can figure something out.
Chris