mahara-contributors team mailing list archive

[François Marier <francois@xxxxxxxxxx>]

** Changed in: mahara
   Importance: Undecided => Medium

** Changed in: mahara
   Importance: Medium => High

** Changed in: mahara
    Milestone: None => 1.4.0

** Changed in: mahara
       Status: New => Triaged

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/751134

Title:
  A group member should not be able to change folders' rights

Status in Mahara ePortfolio:
  Triaged

Bug description:
  In a "Course group", a folder is created and its "member" rights
  changed to "View" and "Edit" but not "Publish". When a users are
  connected with the role of "member", they can change rights on this
  folder, with the following issues:

  1) they can uncheck "View" and then the folder is no more accessible to users with the "member" role :-)
  2) they can check "Publish" and the use files in views, which was not what group manager wanted
  3) they can uncheck/check all tutor's rights and make the file no more accessible for tutors :-)))

  Moreover, the display of rights for each role, should be in an
  hierarchical order: "Admin"; "Tutor"; "Member"