Task #2962 (closed)
Delete Tag as Root
| Reported by: | jburel | Owned by: | jamoore |
|---|---|---|---|
| Priority: | critical | Milestone: | OMERO-Beta4.2.1 |
| Component: | General | Version: | n.a. |
| Keywords: | n.a. | Cc: | wmoore |
| Resources: | n.a. | Referenced By: | n.a. |
| References: | n.a. | Remaining Time: | 0.0d |
| Sprint: | 2010-09-30 (17) |
Description
scenario rwrw-- group:
- user1 owns image1
- user2 creates tag2
- user1 tags image1 with tag2
- user2 then tries to delete tag2
Error: security violation.
Tested added but not turned on
Change History (11)
comment:1 Changed 9 years ago by jmoore
- Status changed from new to assigned
comment:2 Changed 9 years ago by jmoore
- Remaining Time set to 0.25
comment:3 Changed 9 years ago by jmoore
comment:4 Changed 9 years ago by jmoore
- Remaining Time changed from 0.25 to 0
- Resolution set to fixed
- Status changed from assigned to closed
comment:5 Changed 9 years ago by jburel
- Resolution fixed deleted
- Status changed from closed to reopened
Re-opening
insight#1651
comment:6 Changed 9 years ago by jburel
Added test.
In the current implementation, if user2 is group owner, user can delete the tag and the link.
Is it what we want?
comment:7 Changed 9 years ago by jburel
comment:8 Changed 9 years ago by jburel
- Cc wmoore added
comment:9 Changed 9 years ago by jmoore
comment:10 Changed 9 years ago by jburel
- Resolution set to fixed
- Status changed from reopened to closed
Following today's decision, we can close it
comment:11 Changed 9 years ago by jmoore
Note: See
TracTickets for help on using
tickets.
You may also have a look at Agilo extensions to the ticket.
In conversation with Jean-Marie and Will, the danger of deleting a tag (loss of image linkage information) was decided to be higher than the renaming of a tag (which is primarily confusing), and therefore, if user1 has used user2's tag, user2 can no longer delete those tags.