Permission Role Defined on Content Settings

Bug #1321500 reported by Laercio
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Xibo
New
Wishlist
Unassigned

Bug Description

I'm not sure to be a BUG security, but I think it is a problem permissionamento.

I think the permissions button should be a right that is configurable in Content Settings.

Example: Having a choice that will define the type of user User have access to perform tasks permissionamento or not. Which group or user might have this functionality.

Imagine the system administrator to have multiple users using the system, but do not want these users to permissionamentos to any element of the system. This would help to prevent accidental or unauthorized content sharing.

Revision history for this message
Dan Garner (dangarner) wrote :

This is a feature request and not a bug.

Currently only the super admin OR owner can set permissions on layouts, media, etc - this appears to be a request to change that behaviour.

Seems like you are asking for a setting which says "Allow owners to grant permissions to their items to others"

information type: Private Security → Public
Changed in xibo:
importance: Undecided → Wishlist
Revision history for this message
Laercio (laercionit) wrote :

Yes, exactly that. I believe that we could have an option in permissionamento permir to the user even being the owner of the layout or content if we would give the option to set permissions or not.

Dan Garner (dangarner)
Changed in xibo:
milestone: none → 1.8.0-alpha
Revision history for this message
Laercio (laercionit) wrote :

Dan, this case would solve only displaying the permissions option if the user is of type Super Admin.

Currently Displays to work this way, but in other areas of the system, we display the Permissions button if the user is the owner of the object.

I think that view is only super admin already solve this vulnerability.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.