Eroma created AIRAVATA-2190:
-------------------------------
Summary: User A shared a single experiment with User B, read
access. Project is also shared now with User B.
Key: AIRAVATA-2190
URL: https://issues.apache.org/jira/browse/AIRAVATA-2190
Project: Airavata
Issue Type: Bug
Components: PGA PHP Web Gateway
Environment: https://dev.seagrid.org
Reporter: Eroma
Assignee: Marcus Christie
Steps
1. User A shared a single experiment with user B. With read access
2. User B now has access to User A's project which experiment belongs
3. User B can create new experiments under the Project.
4. User B can cancel the shared experiment irrespective of having only read
access
5. user B can clone the shared experiment and create a new experiment under the
same project and remove sharing of the project owner.
6. Original user A cannot see the cloned experiment under his own project
User B should not be able to create any experiments under the project the
shared experiment belongs.
No should be able to cancel the shared experiment, only has read access.
If cloned should create it under own project; not with user A's project
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
