Peter,
I just re-read your note and I realize that I may have misinterpreted your
question. I thought that you were asking to only enforce WRITE permissions
on the parent group. If this was the case, my previously stated concerns
apply. If we're looking to retain the component based checks and
Peter,
I vaguely recall the conversations around (similar, not exactly the same)
permissions at the time this was implemented, and it was decided to allow this
due to time constraints. I do not object to your proposal to change this (maybe
Matt Gilman feels differently?). If you open a Jira,
While experimenting with permissions, I found that if I have no permissions to
a process group, but do have permissions to a child that lives in that group, I
can move that child around on the UI.
I know that in the object model the x,y position values are part of the child,
which I have