Re: [Dspace-tech] Authorization bug? Admin options show during submission

2008-11-26 Thread George Hamilton
Hi I reported this problem, and for me a work-around, to this list last month (22.10.2008): I had a look around and noticed that org.dspace.browse.BrowseConsumer was being fired when a new item was created. In its constructor context.setIgnoreAuthorization(true) was being called but there

[Dspace-tech] Authorization bug? Admin options show during submission

2008-11-25 Thread Floyd, Randall Dean
Hi all, I had asked the list about this one last week but didn't get any responses, so I'm going to try once more before creating a bug report. What I am seeing in the XMLUI on DSpace 1.5.1 is that the navigation options list contains all of the administrative links for a user whether they

Re: [Dspace-tech] Authorization bug? Admin options show during submission

2008-11-25 Thread Dorothea Salo
I think this is a symptom of a larger problem, which is that the DRI only seems to have a sense of two kinds of authenticated users: people with no privileges and people with all privileges. What I really want to know is a sense of *contextual* privilege: what can this person do on this page?

Re: [Dspace-tech] Authorization bug? Admin options show during submission

2008-11-25 Thread Floyd, Randall Dean
A bit more... After reading again I see that I didn't stress that this only happens once a submission starts. In all other contexts the non-admin user does not see admin list options either in the XHTML or the original DRI. As soon as a collection is chosen for submission, the admin list