delete button visible on reference manuals listing

Bug #799888 reported by Robert Marianski
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
KARL3
Won't Fix
Low
Chris Rossi

Bug Description

The reference manuals root listing view checks the delete permission on the parent to see if if the user can delete the resource. This works for community views, but not when viewing the reference manual root listing. When viewing the reference manual root listing as a feature admin, the delete action is displayed, but the user does not have permission to delete the object. For the root reference manual listing, the delete permission should be checked on the object itself.

This can be seen when logged in as a featureadmin.

Changed in karl3:
importance: Undecided → Medium
importance: Medium → Low
assignee: nobody → Nat Katin-Borland (nborland)
assignee: Nat Katin-Borland (nborland) → Chris Rossi (chris-archimedeanco)
milestone: none → m61
Changed in karl3:
milestone: m61 → m62
Revision history for this message
Chris Rossi (chris-archimedeanco) wrote :

Robert,

As a matter of policy, the delete permission is always granted, or not, on the parent folder of the item. This is parallel to the add permission, as these are effectively folder operations. If a feature admin should not be able to delete the root reference manuals folder, they should not have the delete permission in NYC. Changing the heuristics of delete is neither convenient nor desirable, as it can cause confusion down the road if a permission can mean one thing in one context and another thing in a different context.

If you would like to work with me on the bigger picture of what it is you'd like to be able to do here, let me know and we can figure something out.

Chris

Changed in karl3:
status: New → Won't Fix
Revision history for this message
Robert Marianski (rmarianski) wrote :

I just looked at it again, and it seems to be working properly. I had thought that it was showing the delete link without the user actually having access to perform the delete, but that's not the case. I must have just confused myself earlier. Sorry for the noise.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.