Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #4345 (closed)

Opened 8 years ago

Closed 8 years ago

BUG: testDeleteObjectByGroupOwner

Reported by: jburel Owned by: jamoore
Priority: minor Milestone: OMERO-Beta4.3
Component: General Version: n.a.
Keywords: n.a. Cc: jamoore
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: 0.0d
Sprint: 2011-05-19 (12)

Description

Follow the exception

omero.SecurityViolation
    serverStackTrace = "ome.conditions.SecurityViolation: Cannot read ome.model.core.Image:Id_3322
                        at ome.security.basic.BasicACLVoter.throwLoadViolation(BasicACLVoter.java:112)
                        at ome.security.CompositeACLVoter.throwLoadViolation(CompositeACLVoter.java:86)
                        at ome.security.ACLEventListener.onPostLoad(ACLEventListener.java:104)
                        at org.hibernate.engine.TwoPhaseLoad.initializeEntity(TwoPhaseLoad.java:250)
                        at org.hibernate.loader.Loader.initializeEntitiesAndCollections(Loader.java:898)
                        at org.hibernate.loader.Loader.doQuery(Loader.java:773)
                        at org.hibernate.loader.Loader.doQueryAndInitializeNonLazyCollections(Loader.java:270)
                        at org.hibernate.loader.Loader.loadEntity(Loader.java:1953)
                        at org.hibernate.loader.entity.AbstractEntityLoader.load(AbstractEntityLoader.java:86)
                        at org.hibernate.loader.entity.AbstractEntityLoader.load(AbstractEntityLoader.java:76)
                        at org.hibernate.persister.entity.AbstractEntityPersister.load(AbstractEntityPersister.java:3270)
                        at org.hibernate.event.def.DefaultLoadEventListener.loadFromDatasource(DefaultLoadEventListener.java:496)
                        at org.hibernate.event.def.DefaultLoadEventListener.doLoad(DefaultLoadEventListener.java:477)
                        at org.hibernate.event.def.DefaultLoadEventListener.load(DefaultLoadEventListener.java:227)
                        at org.hibernate.event.def.DefaultLoadEventListener.proxyOrLoad(DefaultLoadEventListener.java:285)
                        at org.hibernate.event.def.DefaultLoadEventListener.onLoad(DefaultLoadEventListener.java:152)
                        at org.hibernate.impl.SessionImpl.fireLoad(SessionImpl.java:1082)
                        at org.hibernate.impl.SessionImpl.get(SessionImpl.java:999)
                        at org.hibernate.impl.SessionImpl.get(SessionImpl.java:992)
                        at sun.reflect.GeneratedMethodAccessor301.invoke(Unknown Source)
                        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
                        at java.lang.reflect.Method.invoke(Method.java:592)
                        at org.springframework.orm.hibernate3.HibernateTemplate$CloseSuppressingInvocationHandler.invoke(HibernateTemplate.java:1282)
                        at $Proxy63.get(Unknown Source)
                        at ome.logic.QueryImpl$2.doInHibernate(QueryImpl.java:193)
                        at org.springframework.orm.hibernate3.HibernateTemplate.doExecute(HibernateTemplate.java:406)
                        at org.springframework.orm.hibernate3.HibernateTemplate.execute(HibernateTemplate.java:339)
                        at ome.logic.QueryImpl.find(QueryImpl.java:188)
                        at sun.reflect.GeneratedMethodAccessor961.invoke(Unknown Source)
                        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
                        at java.lang.reflect.Method.invoke(Method.java:592)
                        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
                        at 

Change History (4)

comment:1 Changed 8 years ago by jburel

According to http://trac.openmicroscopy.org.uk/ome/wiki/Delete, a group owner should be able to delete other users data.
This is currently not the case regardless of the permissions level set on the group
If private, an exception is thrown, if collaborative it is not possible to delete.

comment:2 Changed 8 years ago by jburel <j.burel@…>

(In [ada78411ca9cd0c72afb6d79e204810a295f540f/ome.git] on branch develop) Add new delete test for group owner (See #4345)

comment:3 Changed 8 years ago by jmoore

  • Owner set to jmoore
  • Remaining Time set to 0.25
  • Sprint set to 2011-05-19 (12)

comment:4 Changed 8 years ago by jmoore <josh@…>

  • Remaining Time changed from 0.25 to 0
  • Resolution set to fixed
  • Status changed from new to closed

(In [f1351f1e065d5e56e429cc89352224fe1e7f0399/ome.git] on branch develop) Fixing makeGroupOwner in AbstractTest (Fix #4345)

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.82534 sec.)

We're Hiring!