Non institution member can copy another institutions view

[Dirk Meyer]

A user who does not belong to any institution can copy the views of any institution that has any institution views. Institution views should be restricted to be copied only by members of that institution.

1.3.0 rc1
Linux
MySQL

[Richard Mansfield (richard-mansfield)]

I think there are two things we need to do before we can implement this. First, Mahara doesn't have the ability to add view access for an institution yet (only logged-in, groups, users, etc.).

Second, we need more fine-grained copy permissions. Currently a view is either copyable by everyone who can see it, or not copyable at all.

At the request of BCU we recently added comment permissions on every access record, so we could do the same thing with copying.

[Kristina Hoeppner (kris-hoeppner)]

This was implemented in Mahara 1.5 when we made it possible for users to choose to share pages with their institutions instead of public or logged-in users or friends.