[
https://issues.apache.org/jira/browse/AIRAVATA-2021?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15404802#comment-15404802
]
Jeff Kinnison commented on AIRAVATA-2021:
-----------------------------------------
Unfortunately, we are currently constrained by the Grouper system to have to
share the entire project to grant access to a single experiment. I think this
is an issue with how admins are granted permission to view projects (i.e., an
admin user may view all experiments within a project that they may access,
regardless of whether or not the admin user has permission to access those
experiments). This is likely a problem with the browse logic where the list is
being filtered not by Grouper permissions, but by an older permissions scheme
that simply allows admins to see all experiments within a project.
Can you reproduce it when sharing with a non-admin user?
> User shared only a single experiment; project also got shared with the new
> user
> -------------------------------------------------------------------------------
>
> Key: AIRAVATA-2021
> URL: https://issues.apache.org/jira/browse/AIRAVATA-2021
> Project: Airavata
> Issue Type: Bug
> Components: PGA PHP Web Gateway
> Affects Versions: 0.17-SNAPSHOT
> Environment: https://dev.seagrid.org
> Reporter: Eroma
> Assignee: Jeff Kinnison
>
> Steps;
> 1. User A (gateway-user role) shared a single experiment with user B (admin
> role)
> 2. User B logs in
> 3. In Project Browse it shows as Usr A shared the project as well
> 4. Experiment also displayed in Experiment browse.
> 5. When only a experiment is shared only the Experiment browse should
> display. Should NOT share the whole project.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
