[ 
https://issues.apache.org/jira/browse/AIRAVATA-2195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Marcus Christie updated AIRAVATA-2195:
--------------------------------------
    Description: 
Steps;
1. User A creates a a project and shares it with user B and user C
2. user A creates an experiment which is shared with both users B and C
3. User C clones and creates a new experiment and removes User A from the 
experiment. Only the experiment is shared with usr C
4. User A removes the sharing from both users at project level.
5. Both users cannot view the project now.
6. Both users can see the cloned experiment in Experiment Browse but cannot 
view the experiment details. Throws exception attached

First if using owners project to create experiments should not be able to 
remove the owner from the experiment or the project
Secondly if permission is denied should handle with correct error messages. 


h5. TODO
* Add the notion of an indirect or cascading owner to the sharing dialog and 
display them like the [^project_owner.png] screenshot attached

  was:
Steps;
1. User A creates a a project and shares it with user B and user C
2. user A creates an experiment which is shared with both users B and C
3. User C clones and creates a new experiment and removes User A from the 
experiment. Only the experiment is shared with usr C
4. User A removes the sharing from both users at project level.
5. Both users cannot view the project now.
6. Both users can see the cloned experiment in Experiment Browse but cannot 
view the experiment details. Throws exception attached

First if using owners project to create experiments should not be able to 
remove the owner from the experiment or the project
Secondly if permission is denied should handle with correct error messages. 


> Shared user will end up with an experiment which he has no permission to view
> -----------------------------------------------------------------------------
>
>                 Key: AIRAVATA-2195
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2195
>             Project: Airavata
>          Issue Type: Bug
>          Components: PGA PHP Web Gateway
>         Environment: https://dev.seagrid.org
>            Reporter: Eroma
>            Assignee: Marcus Christie
>             Fix For: 0.17-SNAPSHOT
>
>         Attachments: Screen Shot 2016-10-25 at 3.04.35 PM.png, 
> project_owner.png
>
>
> Steps;
> 1. User A creates a a project and shares it with user B and user C
> 2. user A creates an experiment which is shared with both users B and C
> 3. User C clones and creates a new experiment and removes User A from the 
> experiment. Only the experiment is shared with usr C
> 4. User A removes the sharing from both users at project level.
> 5. Both users cannot view the project now.
> 6. Both users can see the cloned experiment in Experiment Browse but cannot 
> view the experiment details. Throws exception attached
> First if using owners project to create experiments should not be able to 
> remove the owner from the experiment or the project
> Secondly if permission is denied should handle with correct error messages. 
> h5. TODO
> * Add the notion of an indirect or cascading owner to the sharing dialog and 
> display them like the [^project_owner.png] screenshot attached



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to