Task #13079 (closed)
Opened 8 years ago
Closed 8 years ago
BUG: Cannot see other peoples data RA
Reported by: | pwalczysko | Owned by: | wmoore |
---|---|---|---|
Priority: | blocker | Milestone: | OMERO-5.2.0 |
Component: | Web | Version: | OMERO-5.2.0-m0 |
Keywords: | n.a. | Cc: | ux@… |
Resources: | n.a. | Referenced By: | n.a. |
References: | n.a. | Remaining Time: | n.a. |
Sprint: | n.a. |
Description
In web, login as a member of read-annotate group (not owner, not admin).
Try to view the data of other members of the read-annotate group.
Go to top left dropdown menu to put other users data to display.
Observe that the menu shows only you - no other users present -> not expected.
Verify that the other users in read-annotate truly exist by logging in as admin -> you can see now all the users and can navigate to their data.
Found out on 5.2-rc1, confirmed on eel merge, login as user-3 (member of read-annotate-1) and try to view other peoples data -> you fail.
Attachments (1)
Change History (7)
Changed 8 years ago by pwalczysko
comment:1 Changed 8 years ago by pwalczysko
comment:2 Changed 8 years ago by pwalczysko
- Cc ux@… added
comment:3 Changed 8 years ago by pwalczysko
Note that this bug is fully present in Insight as well
comment:4 Changed 8 years ago by pwalczysko
This just does not seem like web or insight bug, unless both clients make exactly the same error. Note that read-only and read-write groups are okay in this sense (a rank and file member of private group cannot see other user's data anyway, so nothing to worry about there). Is this a server-side problem ?
comment:5 Changed 8 years ago by pwalczysko
Uh, sorry about the panic. The mystery solved itself. The "read-annotate-1" group, by a coincidence, is actually private (it was probably downgraded during previous tests) and it is private both on eel merge as well as on eel latest. Now I have upgreaded both groups to true read-annotate, and the bug solved itself.
comment:6 Changed 8 years ago by pwalczysko
- Resolution set to invalid
- Status changed from new to closed
Note that this bug must have crept in AFTER the Phase II of jstree testing, where browsing of other peoples data in web in ra groups was okayed by the testers https://docs.google.com/spreadsheets/d/10Go_WZNBm84vR9MqxQd6CHQhxmwq-B9XR5-Xh-fgCU4/edit#gid=984630545