Carousel permissions should not be global

Bug #1863386 reported by Galen Charlton on 2020-02-14
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Evergreen
Medium
Unassigned

Bug Description

The ADMIN_CAROUSEL permission is currently granted with pcrud global_required when it should be restricted to the container.carousel.owner org unit. Changing this will allow local admins at consortia to see and manage just their own carousels.

Evergreen 3.4+

Galen Charlton (gmc) wrote :
Changed in evergreen:
milestone: none → 3.4.3
importance: Undecided → Medium
tags: added: carousel pullrequest
Changed in evergreen:
status: New → Confirmed
Jennifer Weston (jweston) wrote :

I have tested this code and consent to signing off on it with my name, Jennifer Weston, and my email address, <email address hidden>.

tags: added: signedoff
Mike Rylander (mrylander) wrote :

Thanks, Galen and Jennifer!

Picked to master and 3.4.

Changed in evergreen:
status: Confirmed → Fix Committed
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers