dhis2-users team mailing list archive

[TIMIMI, Hazim Bakir <timimih@xxxxxxx>]

Hi Trøyel,
 
As I said, I have also tried restricting public access to 'None' and only granting 'Can View' to a specific user group, and 'Can Edit and View' to a very small number, but I still find users in the group with 'Can View' permission are able to remove objects from the dashboards. I’m not sure how that differs from what you suggest.
 
Sorry, I didn't quite understand your first paragraph. Just to note we don't have access to the server itself, just the web interface.
 
Hazim 
 
From: Trøyel Nerbø [mailto:troyel.nerbo@xxxxxx] 
Sent: 06 April 2017 16:44
To: TIMIMI, Hazim Bakir; Antonia - Pro; dhis2-users@xxxxxxxxxxxxxxxxxxx
Subject: RE: [Dhis2-users] Dashboard sharing access rights

 
I haven’t tested this yet, but a potential work around would be to monitor/schedule a reset of the dashboard items by updating the /api/dashboards/uid.json with the dashboard items it is supposed to contain. Not sure how this would work with resizing and ordering, though.
 
Altneratively, a perhaps better solution. What about adding all users to a user group with the purpose of sharing it as non-public but with the “all users” group? I haven’t tested if the bug is with all “view only” or just the public setting.
 
Trøyel
 
From: TIMIMI, Hazim Bakir [mailto:timimih@xxxxxxx] 
Sent: torsdag 6. april 2017 16.05
To: Trøyel Nerbø <troyel.nerbo@xxxxxx>; Antonia - Pro <antonia@xxxxxxxxxxx>; dhis2-users@xxxxxxxxxxxxxxxxxxx
Subject: RE: [Dhis2-users] Dashboard sharing access rights

 
No worries Trøyel! Olav Poppe reporting it on JIRA on my behalf a while back – I was just trying to find out if anybody has a workaround or solution until the bug is fixed J
 
Cheers,
Hazim
 
From: Trøyel Nerbø [mailto:troyel.nerbo@xxxxxx] 
Sent: 06 April 2017 14:24
To: Trøyel Nerbø; Antonia - Pro; dhis2-users@xxxxxxxxxxxxxxxxxxx; TIMIMI, Hazim Bakir
Subject: RE: [Dhis2-users] Dashboard sharing access rights

 
Oh, apologies. I didn’t read the complete email and see you are already aware of the issue J
 
/T
 
From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@xxxxxxxxxxxxxxxxxxx] On Behalf Of Trøyel Nerbø
Sent: torsdag 6. april 2017 14.21
To: Antonia - Pro <antonia@xxxxxxxxxxx>; dhis2-users@xxxxxxxxxxxxxxxxxxx; TIMIMI, Hazim Bakir <timimih@xxxxxxx>
Subject: Re: [Dhis2-users] Dashboard sharing access rights

 
This is a known bug. If you want to follow the development and get notified when there is a fix you can register and watch the bug issue here: https://jira.dhis2.org/browse/DHIS2-500
 
Best,
Trøyel
 
From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@xxxxxxxxxxxxxxxxxxx] On Behalf Of Antonia - Pro
Sent: torsdag 6. april 2017 14.06
To: dhis2-users@xxxxxxxxxxxxxxxxxxx; TIMIMI, Hazim Bakir <timimih@xxxxxxx>
Subject: Re: [Dhis2-users] Dashboard sharing access rights
 
yes, we have the same problem.

 

 
2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir <timimih@xxxxxxx>:
Dear DHIS2 friends,

I wonder if anyone else has come across the following  problem and, if so, how you solved it: All dashboards on our instance have their public access (with login) sharing setting as 'Can View'. However users are able to remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to 'None' and only granting 'Can View' to a specific user group, and 'Can Edit and View' to a very small number, but I still find users in the group with 'Can View' permission are able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on https://play.dhis2.org/demo/.

This bug was logged in Jira a while ago (https://jira.dhis2.org/projects/DHIS2/issues/DHIS2-500) and I also logged another request for a warning dialog to appear when users click on  the 'Remove' link (https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim
…..
Hazim Timimi
Data Manager, Tuberculosis Monitoring and Evaluation, World Health Organization, Geneva, Switzerland
Tel : +41 22 791 3468



_______________________________________________
Mailing list: https://launchpad.net/~dhis2-users
Post to     : dhis2-users@xxxxxxxxxxxxxxxxxxx
Unsubscribe : https://launchpad.net/~dhis2-users
More help   : https://help.launchpad.net/ListHelp