Bob MacCallum wrote:
> I just found that my guest user account was unable to get details
> of bioassayset transformations - for example it would say
> 
> Plugin               - denied -
> Plugin configuration - denied -
> 
> and the same under transformation and job.  This isn't ideal - a guest
> user would be very interested to know what transformations had been made.
> 
> I double checked all the plugin definitions were readable by this user - and
> they were.
> 
> I found that the problem could be fixed by giving the Guest Role read
> permission on Jobs.  At the same time I removed all create permissions for
> this role (files, directories, jobs).  Now I believe our guest user is truly
> read-only.
> 
> The "multi-user account" option is invaluable here (it stops the user changing
> the password).
> 
> hope that helps someone...

Nice to see that someone is really using the permission system.

I think there is a minor flaw in the design of jobs. They always get 
their permissions as if they are standalone items which means that only 
the user that created a job can view it (unless more permissions are 
granted to the roles as Bob has done). Jobs that are part of an 
experiment should really get their permissions from the experiment just 
as bioassay sets and transformations do. I don't know if it is possible 
to implement this with a reasonable amount of effort, but I'll check it out.

/Nicklas

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
The BASE general discussion mailing list
basedb-users@lists.sourceforge.net
unsubscribe: send a mail with subject "unsubscribe" to
[EMAIL PROTECTED]

Reply via email to