!user.template and !site.helper permissions are displayed but not applied in the Forms tool

Description

In the Forms tool, permissions inherited from the !user.template and/or !site.helper realms are being displayed in the permissions editor but not applied.

To duplicate, given a fresh Sakai installation:

  • login as admin

  • create a new user "user3"

  • create a new project site "site3"

  • add the forms tool

  • add user3 to site3 in the maintain role

  • login as user3

  • open site3

  • open forms tool

  • verify "add" and "import" options

  • open permissions editor

  • verify permissions: maintain role has "create" permission

  • login as admin

  • open realms tool

  • open site3 realm

  • verify metaobj.create permission for "maintain" role in site3 realm

  • uncheck metaobj.create permission for "maintain" role in site3 realm

  • save realm permissions

  • open !user.template realm

  • add "maintain" role

  • check "metaobj.create" permission for "maintain" role

  • save realm permissions

  • login as user3

  • open site3

  • open forms tool

  • verify "add" and "import" are no longer options

  • open permissions editor

  • verify "create" permission for "maintain" role has checkmark image, not checkbox

  • login as admin

  • open realms tool

  • open !user.template realm

  • uncheck metaobj.create permission for "maintain" role

  • save realm permissions

  • open !site.helper realm

  • check "metaobj.create" permission for "maintain" role

  • save realm permissions

  • login as user3

  • open site3

  • open forms tool

  • verify "add" and "import" are no longer options

  • open permissions editor

  • verify "create" permission for "maintain" role has checkmark image, not checkbox

Note this bug is similar to SAK-6359, but this applies to both the !user.template and the !site.helper realms. Note also that this bug is exacerbated by the behavior described in SAK-6361, in which site permissions can be stripped (and not restored by non-admin users) when an inherited permission exists.

A workaround solution for this is to have an administrator add the required permissions directly to the site realm in the Realms tool.

Finally, note that I'm not sure what the intended behavior of the intersection of these realms and the local site permissions are, but the bug is that the permissions display does not match the actual behavior.

Activity

Show:

Neal Caidin October 17, 2016 at 8:47 AM

OSP is no longer supported or even a part of Sakai. Closing all OSP related issues.

Yuanhua Qu April 13, 2011 at 9:24 AM

A fixed patch in might also fix the issue of !site.helper permissions are displayed but not applied in the Forms tool. Just see some similarity and fix was in entity service in kernel which might also partially fix this one. Not tested though.

Christopher Maurer September 29, 2006 at 8:21 AM

Ok, then this is probably unrelated to SAK-6299.

David Adams September 29, 2006 at 7:37 AM

Chris, thanks for taking a look at this. I just checked out the latest (r15441) from the trunk (https://source.sakaiproject.org/svn/sakai/trunk), and this behavior as well as that of both continue. Let me know if I can provide more information for you. Thanks again.

Christopher Maurer September 28, 2006 at 10:29 AM

r15392
Bill's issue () has been resolved. The fix for that might possibly (hopefully) fix this one too.

Won't Fix

Details

Priority

Components

Assignee

Reporter

Created September 18, 2006 at 1:32 PM
Updated October 17, 2016 at 8:48 AM
Resolved October 17, 2016 at 8:47 AM