Task #615 (closed)
SystemTypes and null Permissions are poorly documented
Reported by: | jamoore | Owned by: | jamoore |
---|---|---|---|
Priority: | major | Milestone: | Unscheduled |
Component: | Documentation | Version: | 3.0-Beta1 |
Keywords: | security | Cc: | jburel |
Resources: | n.a. | Referenced By: | n.a. |
References: | n.a. | Remaining Time: | 0.0d |
Sprint: | n.a. |
Description
Though there are lots of tickets regarding "system types", there's not enough to describe how they differ (e.g. no permissions, readable by everyone, writable by no one).
(11:21:42) jean-marie: problem is the following (11:22:01) jean-marie: I allow to view other people data (11:22:12) jean-marie: getAvailableGroups() (11:22:28) jean-marie: return Map of GroupData, ExperimenterData (11:22:56) jean-marie: I build groupData and Experimenter from result of iAdmin.lookupGroups (11:23:32) jean-marie: but when I display I have to make sure that the user is actually allowed to see that group or experimenter (11:23:36) jean-marie: that's why (11:23:53) jean-marie: was doing groupData.getPermissions => permissionData (11:24:05) jean-marie: but getPermissions is null (11:24:24) jean-marie: groupData is created doing new GroupData(IObject group) (11:25:10) jean-marie: if IObject is loaded the permissionsData should be built automatically (11:25:14) jean-marie: is that correct? (11:31:54) Josh: ah. that's a quirk in the system. (11:32:18) Josh: Something I definitely need to better document. (11:32:29) Josh: So, there are these things called system types. (11:33:12) Josh: and if i could have made hibernate do what i wanted it to do, getDetails() on system types would return a SystemTypesDetails and on other types a RegularDetails(). (11:33:20) Josh: that doesn't work for complicated and silly reasons. (11:33:51) Josh: so, on a few types (experimenter, event, and in the future experimentergroup) getDetails().getPermissions() will return null. (11:34:08) Josh: a permissions of null means that anyone can view and probably no one can write an object (R-R-R-). (11:34:38) jean-marie: so for now I don't bother (11:34:47) jean-marie: ;-) (11:34:52) Josh: :) (11:34:56) jean-marie: I have the code in place (11:34:59) jean-marie: already (11:35:02) Josh: so for now and for ever, you just don't have to worry about it. (11:35:10) Josh: there's no need to filter users and groups based on permissions. (11:35:13) Josh: everyone can view them. (11:35:21) Josh: otherwise the system gets silly. (11:35:33) jean-marie: basically if I do isVisible(group) return true (11:35:40) Josh: yes. (11:35:44) Josh: same for experimenter. (11:35:46) jean-marie: and isVisble method will be modified later
Change History (2)
comment:1 Changed 13 years ago by Melissa Linkert <melissa@…>
- Remaining Time set to 0
- Resolution set to fixed
- Status changed from new to closed
comment:2 Changed 13 years ago by Melissa Linkert <melissa@…>
(In [b664f5913437f6cf4300b8675ea4233ef69bcc95/bioformats.git]) Added more sophisticated image name parsing to OpenlabReader?. Closes #615, closes #616.
Note: See
TracTickets for help on using
tickets.
You may also have a look at Agilo extensions to the ticket.
(In [b664f5913437f6cf4300b8675ea4233ef69bcc95/bioformats.git]) Added more sophisticated image name parsing to OpenlabReader?. Closes #615, closes #616.