Opened 17 years ago

Closed 17 years ago

#493 closed defect (fixed)

Trashcan display item owned by other users in some cases

Reported by: Nicklas Nordborg Owned by: Martin Svensson
Priority: minor Milestone: BASE 2.2.2
Component: core Version:
Keywords: Cc:

Description

If logged in as a user with admin permissions this user is able to see other user's removed Bioassaysets and Transformations. Maybe other items as well. I think the problem appears because the 'ownedBy' filter that is activated doesn't apply to Bioassaysets and Transformations since they don't have an owner of their own. They belong to the owner of the experiment. It could also happen for other items which implement the 'Removable' interface but not the 'Ownable' interface. I don't know if there are other such items, we need to check that.

Note however that the permissions are checked and only items which the logged in user has DELETE permission for are shown in the trashcan in all cases. Thus, this bug only affects user's logged with admin privileges.

Also note that this bug also makes News, File types, and other items which neither have a direct or indirect owner to appear in the Trashcan. In this case it is a good thing that they do since otherwise there is no way to delete such items permanently.

Change History (2)

comment:1 by Martin Svensson, 17 years ago

Owner: changed from Nicklas Nordborg to Martin Svensson
Status: newassigned

comment:2 by Martin Svensson, 17 years ago

Resolution: fixed
Status: assignedclosed

(In [3142]) Fixes #493 Trashcan display item owned by other users in some cases

Note: See TracTickets for help on using tickets.