Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.
Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #2879 (closed)

Opened 14 years ago

Closed 14 years ago

Delete tests and permissions

Reported by: jburel Owned by: jburel
Priority: critical Milestone: OMERO-Beta4.2.1
Component: General Version: n.a.
Keywords: n.a. Cc: wmoore, jamoore, cxallan
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: n.a.
Sprint: 2010-09-30 (17)

Description (last modified by jburel)

Add tests to DeleteServiceTest to make sure that delete working with permissions system.

Current situation (dangerous):

As soon as the group is collaborative, any member of the group can delete an object owned by another user e.g. an image.

The administrator and (maybe) the owner of the group should be allowed.

Change History (20)

comment:1 Changed 14 years ago by atarkowska

  • Sprint set to 2010-09-09 (16)

comment:2 Changed 14 years ago by jburel

  • Owner set to jburel
  • Status changed from new to assigned

comment:3 Changed 14 years ago by jburel

  • Description modified (diff)

comment:4 Changed 14 years ago by jburel

  • Description modified (diff)

comment:5 Changed 14 years ago by jburel

(In [8151]) refactoring code for model (see #2938) and tests for delete and permissions (see #2879)

comment:6 Changed 14 years ago by jburel

(In [8152]) Turned off test for now (see #2879)

comment:7 Changed 14 years ago by jburel

(In [8153]) Added test to check delete by Administrator (see #2879)

comment:8 Changed 14 years ago by jburel

(In [8163]) Refactor code to delete objects (more classes). Add delete tests and permissions (see #2879 and see #2880)

comment:9 Changed 14 years ago by jburel

  • Sprint changed from 2010-09-09 (16) to 2010-09-30 (17)

comment:10 Changed 14 years ago by jmoore

(In [8180]) Deleting annotation links only for top-level annotation deletes (See #2945)

This also includes also the first initial work on group-based delete.
(See #2881 and #2879)

comment:11 Changed 14 years ago by jmoore

(In [8183]) Refactoring for making all deletes group permission based (See #2881 and #2879)

comment:12 Changed 14 years ago by jmoore

(In [8189]) Refactoring user/group creation in DeleteServicePermissionsTest (See #2879)

All user creation logic is now in the newUser*() methods with several
helpers for dealing with roots sessions and switching between users.

comment:13 Changed 14 years ago by jburel

(In [8191]) Added more tests (see #2776 and see #2879)

comment:14 Changed 14 years ago by jburel

(In [8196]) Added more tests (see #2879)

comment:15 Changed 14 years ago by jmoore

(In [8200]) Minor test changes (See #2879, #2881)

comment:16 Changed 14 years ago by jburel

(In [8201]) Added tests to delete an image viewed by other users (see #2879)

comment:17 Changed 14 years ago by jburel

  • Status changed from assigned to closed

comment:18 Changed 14 years ago by jburel

  • Status changed from closed to reopened

comment:19 Changed 14 years ago by jburel

(In [8283]) removed duplicated test. (see #2879)

comment:20 Changed 14 years ago by jburel

  • Status changed from reopened to closed
Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.69963 sec.)

© 2000-2014 University of Dundee & Open Microscopy Environment. Creative Commons Attribution 3.0 Unported License
OME source code is available under the GNU General public license or through commercial license from Glencoe Software

We're Hiring!