A group member should not be able to change folders' rights

Bug #751134 reported by Dominique-Alain JAN
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Triaged
High
Unassigned

Bug Description

In a "Course group", a folder is created and its "member" rights changed to "View" and "Edit" but not "Publish". When a users are connected with the role of "member", they can change rights on this folder, with the following issues:

1) they can uncheck "View" and then the folder is no more accessible to users with the "member" role :-)
2) they can check "Publish" and the use files in views, which was not what group manager wanted
3) they can uncheck/check all tutor's rights and make the file no more accessible for tutors :-)))

Moreover, the display of rights for each role, should be in an hierarchical order: "Admin"; "Tutor"; "Member"

Changed in mahara:
importance: Undecided → Medium
importance: Medium → High
milestone: none → 1.4.0
status: New → Triaged
Revision history for this message
Richard Mansfield (richard-mansfield) wrote :

This is intended behaviour I think - if you don't want group members to be able to change group folder permissions, you should uncheck 'Edit' permission on the folder.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.