mahara-contributors team mailing list archive

[Dominique-Alain JAN <751134@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

In a "Course group", a folder is created and its "member" rights changed
to "View" and "Edit" but not "Publish". When a users are connected with
the role of "member", they can change rights on this folder, with the
following issues:

1) they can uncheck "View" and then the folder is no more accessible to users with the "member" role :-)
2) they can check "Publish" and the use files in views, which was not what group manager wanted
3) they can uncheck/check all tutor's rights and make the file no more accessible for tutors :-)))

Moreover, the display of rights for each role, should be in an
hierarchical order: "Admin"; "Tutor"; "Member"

** Affects: mahara
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/751134

Title:
  A group member should not be able to change folders' rights

Status in Mahara ePortfolio:
  New

Bug description:
  In a "Course group", a folder is created and its "member" rights
  changed to "View" and "Edit" but not "Publish". When a users are
  connected with the role of "member", they can change rights on this
  folder, with the following issues:

  1) they can uncheck "View" and then the folder is no more accessible to users with the "member" role :-)
  2) they can check "Publish" and the use files in views, which was not what group manager wanted
  3) they can uncheck/check all tutor's rights and make the file no more accessible for tutors :-)))

  Moreover, the display of rights for each role, should be in an
  hierarchical order: "Admin"; "Tutor"; "Member"