Uploaded image for project: '{RETIRED} Curriki'
  1. {RETIRED} Curriki
  2. CURRIKI-1153 Groups for 1.5.x - PROJECT
  3. CURRIKI-1281

Protected and Private Assets and Collection created in or copied to a Group Collection space need to give edit rights to the entire group, not just the contributor.

    XMLWordPrintable

Details

    Description

      From the groups spec:
      1) When a group resource is marked as Private, it is private for the group, not the contributor, thus all members of the group have access.
      2) All other normal inheritance behavior applies except where the default is set by the Admin.

      The access rules/privileges for group resources and collections are different then for resources in a personal collection space. The access privileges setting for resources in a group collection space, specifically "Protected" and "Private", refer to ALL members of the group, and not just the contributor/creator. This affects all places in the site where a learning resource can be added or copied (GWT).

      To address this, the add and copy process needs to be modified to check if the asset is being added to a group collection space. If this is the case, then the XWiki rights object need to allow the Group, not just the individual user to view and edit.

      Please note, eventual groups may want to restrict view and edit even within a group to specific roles or individuals.

      There may be a related issue that need to be checked, and that is: what happens if a user copies a group resource into a personal collection. Can they make that Private just to them or protected just to them (Do the group rights get removed on copy to a personal collection space?)

      Attachments

        Activity

          People

            harry Hariharan Ganesan
            toddsherman Todd Sherman
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: