This is tested in DSpace 5.2 XMLUI

I have
- community "commA"
--- community "commB" inside it
----- collection "collC" inside it
------- item "itemD" inside it

I have an user "ucomma" with "admin" rights over "commA".

I am logged in as "ucomma".

Editing community "commA" - there is no "Delete" button.
Editing community "commB" - there is "Delete" button.

I clicked the "Delete" button, accepted the Warning that "all underlying
items will be deleted", and got an error message:

Authorization denied for action REMOVE on COMMUNITY:13 by user 5

org.dspace.authorize.AuthorizeException: Authorization denied for action
REMOVE on COMMUNITY:13 by user 5
    at
org.dspace.authorize.AuthorizeManager.authorizeAction(AuthorizeManager.java:181)
    at
org.dspace.authorize.AuthorizeManager.authorizeAction(AuthorizeManager.java:100)
    at org.dspace.content.Community.removeCollection(Community.java:1080)
    at org.dspace.content.Community.rawDelete(Community.java:1252)
    at org.dspace.content.Community.removeSubcommunity(Community.java:1168)
    at org.dspace.content.Community.delete(Community.java:1224)
    at
org.dspace.app.xmlui.aspect.administrative.FlowContainerUtils.processDeleteCommunity(FlowContainerUtils.java:1017)

In addition to the error message something has changed and now:

the "DSpace Home" page shows two top level communities "commA" and "commB"
the "commA" page shows no subcommunities and no collections and "itemD" as
recently submitted
the "commB" page shows collection "collC" and "itemD" as recently submitted
but shows as breadcrumbs DSpace Home -> commA -> commB
the "collC" page shows "itemD" as recently submitted
but shows as breadcrumbs DSpace Home -> commA -> commB -> collC

I think this is dangerous.
Two questions
1. Is there another place where bugs are reported?
2. What could be the workaround? May be to forbid to the community admins
to delete subcommunities:
core.authorization.community-admin.delete-subelement = false

3. I have not tested will this work if I am logged in as system admin.

-- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/dspace-tech.
For more options, visit https://groups.google.com/d/optout.

Reply via email to