Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #2879 (closed)

Opened 9 years ago

Closed 9 years ago

Delete tests and permissions

Reported by: jburel Owned by: jburel
Priority: critical Milestone: OMERO-Beta4.2.1
Component: General Version: n.a.
Keywords: n.a. Cc: wmoore, jamoore, cxallan
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: n.a.
Sprint: 2010-09-30 (17)

Description (last modified by jburel)

Add tests to DeleteServiceTest to make sure that delete working with permissions system.


Current situation (dangerous):

As soon as the group is collaborative, any member of the group can delete an object owned by another user e.g. an image.

The administrator and (maybe) the owner of the group should be allowed.

Change History (20)

comment:1 Changed 9 years ago by atarkowska

  • Sprint set to 2010-09-09 (16)

comment:2 Changed 9 years ago by jburel

  • Owner set to jburel
  • Status changed from new to assigned

comment:3 Changed 9 years ago by jburel

  • Description modified (diff)

comment:4 Changed 9 years ago by jburel

  • Description modified (diff)

comment:5 Changed 9 years ago by jburel

(In [8151]) refactoring code for model (see #2938) and tests for delete and permissions (see #2879)

comment:6 Changed 9 years ago by jburel

(In [8152]) Turned off test for now (see #2879)

comment:7 Changed 9 years ago by jburel

(In [8153]) Added test to check delete by Administrator (see #2879)

comment:8 Changed 9 years ago by jburel

(In [8163]) Refactor code to delete objects (more classes). Add delete tests and permissions (see #2879 and see #2880)

comment:9 Changed 9 years ago by jburel

  • Sprint changed from 2010-09-09 (16) to 2010-09-30 (17)

comment:10 Changed 9 years ago by jmoore

(In [8180]) Deleting annotation links only for top-level annotation deletes (See #2945)

This also includes also the first initial work on group-based delete.
(See #2881 and #2879)

comment:11 Changed 9 years ago by jmoore

(In [8183]) Refactoring for making all deletes group permission based (See #2881 and #2879)

comment:12 Changed 9 years ago by jmoore

(In [8189]) Refactoring user/group creation in DeleteServicePermissionsTest (See #2879)

All user creation logic is now in the newUser*() methods with several
helpers for dealing with roots sessions and switching between users.

comment:13 Changed 9 years ago by jburel

(In [8191]) Added more tests (see #2776 and see #2879)

comment:14 Changed 9 years ago by jburel

(In [8196]) Added more tests (see #2879)

comment:15 Changed 9 years ago by jmoore

(In [8200]) Minor test changes (See #2879, #2881)

comment:16 Changed 9 years ago by jburel

(In [8201]) Added tests to delete an image viewed by other users (see #2879)

comment:17 Changed 9 years ago by jburel

  • Status changed from assigned to closed

comment:18 Changed 9 years ago by jburel

  • Status changed from closed to reopened

comment:19 Changed 9 years ago by jburel

(In [8283]) removed duplicated test. (see #2879)

comment:20 Changed 9 years ago by jburel

  • Status changed from reopened to closed
Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.82035 sec.)

We're Hiring!