Warning: Can't synchronize with repository "(default)" (/home/git/ome.git does not appear to be a Git repository.). Look in the Trac log for more information.
Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #9620 (closed)

Opened 12 years ago

Closed 12 years ago

BUG: Read-annotate permissions not correct

Reported by: rkferguson Owned by: jburel
Priority: critical Milestone: OMERO-4.4.4
Component: Insight Version: n.a.
Keywords: n.a. Cc:
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: n.a.
Sprint: 2012-09-25 (5)

Description

User-1 was only in private-1 so added them to Read-annotate-1 to test.

In Read-annotate-1 - cannot edit name/description, rate, add tag or attachment or comment on other user's data. Cannot save ROIs in Read-annotate-1 group.

Behaves as expected in web client - can add tags, attachments and comments to other users data. Lock icon is present on images.

Attachments (3)

user-1 user-1's Data Manager.jpg (216.2 KB) - added by rkferguson 12 years ago.
user-1 user-1's Data Manager 2.jpg (202.5 KB) - added by rkferguson 12 years ago.
Webclient - Windows Internet Explorer provided by MSN and Bing.jpg (133.1 KB) - added by rkferguson 12 years ago.

Download all attachments as: .zip

Change History (11)

comment:1 Changed 12 years ago by rkferguson

Noted anomalous behaviour - in Read-annotate-1 looking at user-6 data - some cannot annotate and some can - see screenshots. No particular pattern discernible.

Changed 12 years ago by rkferguson

Changed 12 years ago by rkferguson

comment:2 Changed 12 years ago by rkferguson

Windows 7 - Insight. Further anomalies with permissions in other tests - Insight - logged in as user-12 Private-1 - can view data belonging to user-1 - can delete tags and attachments belonging to user-1 but cannot add tags, attachments, comments or rate/edit name or description.

Last edited 12 years ago by rkferguson (previous) (diff)

comment:3 Changed 12 years ago by rkferguson

Windows 7 - IE Web client. Logged in as user-12 - Private-1 viewing data belonging to user-1 - can edit name and description but not add tags, attachments or comments. Screenshot attached.

comment:4 Changed 12 years ago by rkferguson

Testing with Webstart in Windows 7 - behaves the same as Insight - cannot edit name or descriptions but can delete annotations and attachments belonging to other users on other user's data.

comment:5 Changed 12 years ago by jburel

Several different problems here. That need to be broken down depending on group permissions.

Windows 7 - IE Web client. Logged in as user-12 - Private-1 viewing data belonging to user-1 - can edit name and description but not add tags, attachments or comments. Screenshot attached.

According to permissions table, user-12 should not be able to Edit or add annotations. The behavior of insight is the correct one see permissions table.
See #9626

comment:6 Changed 12 years ago by jburel

how did you add the user? Did you reconnect after adding?

comment:7 Changed 12 years ago by rkferguson

Quit Insight and did it through admin in web client then re-opened Insight.

comment:8 Changed 12 years ago by jburel

  • Resolution set to invalid
  • Status changed from new to closed

Probably due to the roles not correctly set. I have retested with correct set-up i.e. user-5 as group owner of read-annotate and user-3 basic member.

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.68623 sec.)

We're Hiring!