Wrong destination (for shared to user) from link to directory from transformation

[Johan Vallon-Christersson]

After running a plugin (that creates directories and files and performs a transformation) in an experiment shared to a project (as described in ticket:980) I have manually shared created items to the project. When a colleague of mine (a member of the active project) follows a link in the transformation that point to a directory (my directory but shared to project), he incorrectly ends up in his own home directory.

[Jari Häkkinen]

Johan check this issue.

[Johan Vallon-Christersson]

Replying to jari:

Johan check this issue.

Will check after Lund Onk production installation runs 2.8

[Johan Vallon-Christersson]

Replying to johan:
Have tested in 2.8.4 without success.

Some new specification on the error and how to recreate the problem available below.

---

UserA owns ExperimentX. The experiment directory (ExpDir) is owned by UserA and is located under /home/UserA/projects/ExpDir

ExperimentX and ExpDir is shared to ProjectX and UserB is a member of ProjectX.

UserB runs a plugin in experimentX that creates directory PluginDir and some files that are placed in PluginDir.

PluginDir is created in ExpDir (/home/UserA/projects/ExpDir/PluginDir) and owner is set to UserB.

When UserB follows link to PluginDir (/home/UserA/projects/ExpDir/PluginDir) from transformation, he incorrectly ends up in his own home directory (/home/UserB).

[Nicklas Nordborg]

Are all directories on the path shared to UserB? The directory tree only includes directories that are visible for the logged in user and since it must be a tree there can be no "holes". Eg. the entire path leading to a directory must be visible for the user.

[Jari Häkkinen]

Replying to nicklas:

Are all directories on the path shared to UserB? The directory tree only includes directories that are visible for the logged in user and since it must be a tree there can be no "holes". Eg. the entire path leading to a directory must be visible for the user.

No. But if UserB gets read permission for all directories down to the result directory then the results become visible. This has a major implication

• All users in my projects must have read to my home and other directories.

Of course, the other users will only see whatever I decide to share but there will be a lot of read sharing.

I thought the idea was that once the result in the analysis tree was done and a user opted for browsing the resulting files directly from a transformation would end up in the correct directory view regardless permission in other directories. The user must of course have the proper permissions for the directory where the results reside. Is this possible to realize such a use case?

[Nicklas Nordborg]

It is a limitation in the web client. It loads directories top-down and will not reach a subdirectory unless a user has read permission for all directories leading to it.

[Nicklas Nordborg]

Replaced by #1178.