[
https://issues.apache.org/jira/browse/AIRAVATA-2195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Eroma reopened AIRAVATA-2195:
-----------------------------
Assignee: Marcus Christie (was: Eroma)
Scenario 1 - This need to be fixed
1. User A shares a project with user B and C with read access.
2. User A creates an experiment under the above project and it is automatically
shared with both above users with read rights.
3. User B clones the experiment under one of his own projects and removes user
A from sharing and only keeps user C
4. User A removes both users from his project. When removed and updated only
user B gets removed but user C cannot be removed.
5. User C remains in project sharing. User C also should be able to remove.
Scenario 2 - This is correct
1. User A shares a project with user B and C with write access.
2. User A creates an experiment under the above project and it is automatically
shared with both above users with write rights.
3. User B clones the experiment under the same shared projects and since user A
is the project owner cannot remove him.
4. User B can remove user C successfully from the cloned experiment.
5. User Bs experiment stays shared with User A.
> Shared user will end up with an experiment which he has no permission to view
> -----------------------------------------------------------------------------
>
> Key: AIRAVATA-2195
> URL: https://issues.apache.org/jira/browse/AIRAVATA-2195
> Project: Airavata
> Issue Type: Bug
> Components: PGA PHP Web Gateway
> Environment: https://dev.seagrid.org
> Reporter: Eroma
> Assignee: Marcus Christie
> Fix For: 0.17
>
> Attachments: Screen Shot 2016-10-25 at 3.04.35 PM.png,
> project_owner.png
>
>
> Steps;
> 1. User A creates a a project and shares it with user B and user C
> 2. user A creates an experiment which is shared with both users B and C
> 3. User C clones and creates a new experiment and removes User A from the
> experiment. Only the experiment is shared with usr C
> 4. User A removes the sharing from both users at project level.
> 5. Both users cannot view the project now.
> 6. Both users can see the cloned experiment in Experiment Browse but cannot
> view the experiment details. Throws exception attached
> First if using owners project to create experiments should not be able to
> remove the owner from the experiment or the project
> Secondly if permission is denied should handle with correct error messages.
> h5. TODO
> * Add the notion of an indirect or cascading owner to the sharing dialog and
> display them like the [^project_owner.png] screenshot attached
> * also show the indirect owner in the display of shared with users
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
