Eroma created AIRAVATA-3252:
-------------------------------

             Summary: BUG: Disable user can clone and create an experiment
                 Key: AIRAVATA-3252
                 URL: https://issues.apache.org/jira/browse/AIRAVATA-3252
             Project: Airavata
          Issue Type: Sub-task
          Components: Django Portal
    Affects Versions: 0.18
         Environment: https://django.staging.seagrid.org
            Reporter: Eroma
            Assignee: Marcus Christie
             Fix For: 0.19
         Attachments: Screen Shot 2019-11-01 at 11.33.54 PM.png, Screen Shot 
2019-11-01 at 11.34.54 PM.png

1. User A created a group and added disabled user B in to the group. Disable 
means still not added to an active group.
2. then shared a completed experiment with the group.
3. Now user B logged in and went to browse experiments in Django portal.
4. User B has the shared experiment and was able to click clone.
5. In edit experiment the group resource profile is empty but can save and 
launch the experiment.
6. Experiment did not get really launched but User B was able to create 
experiments. 
7. Even though sharing is possible with disabled users, may be they should not 
be able to do anything with those shared experiments.





--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to