version rights model need to be clarified
-----------------------------------------
Key: NXP-5127
URL: https://jira.nuxeo.org/browse/NXP-5127
Project: Nuxeo Enterprise Platform
Issue Type: Bug
Affects Versions: 5.3.1
Reporter: Stéphane Lacoin
Assignee: Stéphane Lacoin
Fix For: 5.3.2
The current rights model about version is confusing. We're defining two
permissions "Version" and "ReadVersion".
These two versions are include in "Read" permission. Also, "ReadVersion" is
aliasing "Version".
We don't want to keep this.
Here is what we want to be in place instead.
Let say that
* we have to basic permissions : READ_VERSION (can read a version) and
WRITE_VERSION (can create a version)
* we have a composed permission VERSION that composes READ_VERSION and
WRITE_VERSION
* the READ permission compose the READ_VERSION permission
If we update the security checks for using this model, we're done.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
https://jira.nuxeo.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
ECM-tickets mailing list
[email protected]
http://lists.nuxeo.com/mailman/listinfo/ecm-tickets
