[
http://jira.nuxeo.org/browse/NXP-1862?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_31140
]
Radu Darlea commented on NXP-1862:
----------------------------------
The business logic on publishing a document is:
1. User requests the document to be published.
2. If the user is "contributor" (has at least Write rights on section), the
document is published right away.
3. If not, the list of contributors is created: the user having at least Write
rights on the section.
4. The contributors gains Modify access on the pending document as proxy, the
remaining users are denied to see the proxy.
5. When section is browsed by an user, the rights on the contained objects (in
our case, the proxy of pending document) take precedence over the rights on the
container (section), so the proxy won't be visible but only to contributors and
the owner. Also, only the contributors can modify the state.
> The user rights in sections are not updated dynamically
> -------------------------------------------------------
>
> Key: NXP-1862
> URL: http://jira.nuxeo.org/browse/NXP-1862
> Project: Nuxeo Enterprise Platform 5
> Issue Type: Bug
> Components: Security
> Affects Versions: 5.1.3
> Environment: Latest build on branch
> Reporter: Radu Darlea
> Assignee: Thierry Delprat
> Fix For: 5.1.3
>
>
> Change the rights of a user on sections is not dynamically updated regarding
> the documents issued for publication.
> Steps to reproduce:
> 1. Send a document for publication (the user has to have Read rights on
> section so the document is not published directly)
> 2. Add / update the rights of a different user on section so the user is
> promoted to have at least Write (or Manage Everything) rights
> 3. Even the new gained rights would allow the user to Accept/Reject the
> pending document, this is not possible.
> It would be a problem the other way around (downgrading the user rights from
> Write to something lesser), I didn't test what happens.
> The problem is that the publishing documents are hidden to all user except
> the contributors. And the list of contributors is created during workflow, so
> subsequent changes are not reflected. A possible solution is to not modify
> the rights on the proxy of document sent to publish, but to implement a
> special handling for the sections and the document sent to publish. Maybe to
> create a subsection repository?
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
