Opened 15 years ago
Last modified 15 years ago
#1373 closed defect
Annotation acces should not limit annotated item access — at Initial Version
Reported by: | Jari Häkkinen | Owned by: | everyone |
---|---|---|---|
Priority: | major | Milestone: | BASE 2.13.1 |
Component: | web | Version: | |
Keywords: | Cc: |
Description
The scenario:
UserA has a rawbioassay RBA derived from SampleA (path: SampleA -> ExtractA -> LabeledExtractA -> HybA -> ScanA -> RBA), all items are shared to UserB (R) except SampleA and RBA that is shared with (RUW).
UserB annotates SampleA with AnnotB (AnnotB is an annotation type owned by UserB and not shared with UserA). UserB creates an experiment ExpB including RBA and with AnnotB as experimental factor. Then user B automatically allows RBA to inherit the AnnotB from SampleA from the experiment properties view.
A problem occurs when UserA tries to view the properties of RBA (RBA will be displayed in rawbioassay list view), BASE replies
Permission denied: Not allowed to read Annotation type[id=xxx; name=AnnotB]
Suggested solution:
UserA should of course see RBA details but without knowing anything about inherited AnnotB. Note, UserA can look at SampleA details without seeing AnnotB as expected and desired. That is the same should apply when UserA looks at RBA.