I suspect you are also ending up with the group in the Items MUTATE_META or the parent collections "COLLECTION_NNN_ADMIN" permissions. These would allow that group to edit the metadata as well. Check the Policies in the Collection Edit view or the Item Edit view to see which groups map to which policies/actions. If you post what you find here, someone may be able to tell you if this is the case.
Mark On Wed, Apr 15, 2009 at 9:34 PM, Lyn Amery <[email protected]> wrote: > > > Hi all, > > > > I have certain items which must be restricted to particular clients. > > On the item, I’ve set the authorization Item Policy to READ for a > > particular group only. This has – partially – the desired effect, as > > a search reveals the item exists, but only members of the group > > can look at it. > > > > The problem is that those group members can go into the item’s > > metadata and change it. Surprising. They musn’t be able to modify > > anything, only view the item. Is this the way it’s designed to work? > > > > My apologies if this has been discussed – I seem to recall something > > similar – but I’m unable to search the list archives at SourceForge. > > Always says it can’t connect to the search server. > > > > Cheers, > > Lyn > > > > Lyn Amery > > Web Analyst/Programmer > > State Records Office > > (08) 9427 3493 > > [email protected] > > > > ------------------------------------------------------------------------------ > Stay on top of everything new and different, both inside and > around Java (TM) technology - register by April 22, and save > $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. > 300 plus technical and hands-on sessions. Register today. > Use priority code J9JMT32. http://p.sf.net/sfu/p > _______________________________________________ > DSpace-tech mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/dspace-tech > > -- Mark R. Diggory http://purl.org/net/mdiggory/homepage - Bio ------------------------------------------------------------------------------ Stay on top of everything new and different, both inside and around Java (TM) technology - register by April 22, and save $200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco. 300 plus technical and hands-on sessions. Register today. Use priority code J9JMT32. http://p.sf.net/sfu/p _______________________________________________ DSpace-tech mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/dspace-tech
