[ 
http://jira.dspace.org/jira/browse/DS-562?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Tim Donohue updated DS-562:
---------------------------

    Fix Version/s: 1.7.0
         Assignee: Andrea Bollini

This was discussed in DSpace Developers Meeting on Aug 18 2010

[20:26] <tdonohue>  Last one (for today): User with WRITE, ADD and ADMIN policy 
on collection cannot delete that collection due to bug in 
AuthorizeUtil.authorizeManageTemplateItem(context,collection) : 
http://jira.dspace.org/jira/browse/DS-562
[20:27] <tdonohue> Any volunteers to investigate behaviour described in DS-562
[20:27] <bollini> yes, give it to me
[20:28] <tdonohue> ok -- DS-562, assign to bollini for further investigation.

> User with WRITE, ADD and ADMIN policy on collection cannot delete that 
> collection due to bug in 
> AuthorizeUtil.authorizeManageTemplateItem(context,collection)
> -------------------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: DS-562
>                 URL: http://jira.dspace.org/jira/browse/DS-562
>             Project: DSpace 1.x
>          Issue Type: Bug
>          Components: DSpace API
>    Affects Versions: 1.6.0
>            Reporter: Andrew Taylor
>            Assignee: Andrea Bollini
>            Priority: Minor
>             Fix For: 1.7.0
>
>
> During the process of deleting a collection a call is made to 
> AuthorizeUtil.authorizeManageTemplateItem(context,collection) - line 289 of 
> 1.6.0 code, which seems to contain a logic error in the way it checks the 
> permissions.
> As it currently stands this method will only 'allow' if the user is a system 
> admin or is an admin who cannot edit the collection (ie lacks the ADD or 
> WRITE policy). 
> This to me seems like it is broken but I will happily stand corrected if it 
> is working as intended.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: 
http://jira.dspace.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

------------------------------------------------------------------------------
Sell apps to millions through the Intel(R) Atom(Tm) Developer Program
Be part of this innovative community and reach millions of netbook users 
worldwide. Take advantage of special opportunities to increase revenue and 
speed time-to-market. Join now, and jumpstart your future.
http://p.sf.net/sfu/intel-atom-d2d
_______________________________________________
Dspace-devel mailing list
Dspace-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-devel

Reply via email to