mahara-contributors team mailing list archive

[Richard Mansfield <865911@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

The can_publish_artefact method on the User class, introduced in commit
aba54873f4 (see bug #655631) is out of line with other permissions on
the site when it comes to institution artefacts.

Any institution member can include institution files on one of their own
pages, but this method (currently used when putting images into forum
posts) only allows publishing by institutional admins.  The permissions
should be the same in both cases.  We should allow all institution
members to include institution files in forum posts too, and if we
decide this is too permissive, we should file another bug to make
institution artefact publishing permissions more restrictive everywhere.

** Affects: mahara
     Importance: Low
     Assignee: Richard Mansfield (richard-mansfield)
         Status: In Progress

** Changed in: mahara
       Status: New => In Progress

** Changed in: mahara
   Importance: Undecided => Low

** Changed in: mahara
     Assignee: (unassigned) => Richard Mansfield (richard-mansfield)

** Changed in: mahara
    Milestone: None => 1.5.0

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
https://bugs.launchpad.net/bugs/865911

Title:
  User can_publish_artefact method too restrictive

Status in Mahara ePortfolio:
  In Progress

Bug description:
  The can_publish_artefact method on the User class, introduced in
  commit aba54873f4 (see bug #655631) is out of line with other
  permissions on the site when it comes to institution artefacts.

  Any institution member can include institution files on one of their
  own pages, but this method (currently used when putting images into
  forum posts) only allows publishing by institutional admins.  The
  permissions should be the same in both cases.  We should allow all
  institution members to include institution files in forum posts too,
  and if we decide this is too permissive, we should file another bug to
  make institution artefact publishing permissions more restrictive
  everywhere.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/865911/+subscriptions