Bug #13345

Adding per-institution permissions limits access to more descriptions than expected

Added by Dan Gillean about 1 month ago.

Status:NewStart date:06/08/2020
Priority:MediumDue date:
Assignee:-% Done:

0%

Category:Access Control
Target version:-
Google Code Legacy ID: Tested version:2.5, 2.6
Sponsored:No Requires documentation:

Description

  • Navigate to a user
  • Go to description permissions
  • Add custom permissions for one particular institution - deny most permission (see attached screenshot)
  • Save, then go to browse > archival descriptions

Resulting error

  • Multiple descriptions belonging to other institutions are also missing.
  • In the demo data, when I applied this to Burlington (6 holdings), all of Sudbury (17 holdings) and several others disappeared as well.

Expected result

  • When applying custom permissions per institution, only descriptions linked to that institution are affected.

burlington-acl.png (68.6 KB) Dan Gillean, 06/08/2020 01:21 PM

Also available in: Atom PDF