-
Type:
Sub-task
-
Status: Closed (View Workflow)
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: 0.20 Larks
-
Fix Version/s: 0.20 Larks
-
Labels:
-
Environment:
php Migration build#9
After last migration we have problems with permissions, e.g. for Персистентность branch we have:
VIEW_TOPICS
Allowed: Moderators Of "Персистентность в Java (JPA, ORM, ODB)", Registered Users, Administrators, Anonymous Users
Restribed: Banned Users
While it should be:
VIEW_TOPICS
Allowed: Registered Users, Anonymous Users
Restricted: <none>, no one should be restricted from viewing this branch.
List of found permissions discrepancies
Note
- AR - actual result
- ER - expected result
For all branches except "Помойка", "Примеры", "Модераторская"
1. AR: Administrators are not in Allowed list for:
VIEW_TOPICS, CREATE_POSTS, DELETE_OWN_POSTS, EDIT_OWN_POSTS,
Administrators are in Restricted list for:
MOVE_TOPICS, CLOSE_TOPICS, DELETE_OTHERS_POSTS, EDIT_OTHERS_POSTS, CREATE_ANNOUNCEMENTS, CREATE_STICKED_TOPICS
ER: JC-616 1. Administrators group should have all the possible permissions to all the branches and Poulpe component
2. AR: Registered users and Модераторы groups are in totally different lists
Модераторы are in Restricted list:
MOVE_TOPICS, CLOSE_TOPICS, DELETE_OTHERS_POSTS, EDIT_OTHERS_POSTS, CREATE_ANNOUNCEMENTS, CREATE_STICKED_TOPICS
ER: JC-616
- 2. Модераторы group should not have any additional permissions - same permissions as Registered Users.
- 3. Модераторы of [particular branch name] should have all the possible permissions for branch they are moderatin
3. AR: Supreme Moderators don't have any branch permissions
ER: JC-616
- 4. Supreme Moderators should have all the possible branch permissions in every branch.
4. AR: Group Авторы форума Новости Софта doesn't have any permissions for branch Новости программных продуктов.
ER: JC-616
Авторы форума Новости Софта should have all possible permissions for branch Новости программных продуктов.
5. AR: Banned users are not in Restricted lists for
MOVE_TOPICS, CLOSE_TOPICS, DELETE_OTHERS_POSTS, EDIT_OTHERS_POSTS, CREATE_ANNOUNCEMENTS, CREATE_STICKED_TOPICS
ER: JC-616
Banned Users should have all the permissions but VIEW_TOPICS restricted for all the branches.
- relates to
-
-
- Closed
-
Stanislav Bashkyrtsev, should FAQ Managers have CREATE_FORUM_FAQ personal permission?
Yes, they should have this permission. I'll add this to the story description.should FAQ Managers have CREATE_FORUM_FAQ personal permission?
This is what I mentioned - both Admins and Supreme Moderators have all possible branch permissions for all branches. But Supreme Moderators can't log in to admin panel.what's the difference between Administrators and Supreme moderators? I see just one, supreme moderator should not have group permission for Admin component. If so, I think all brahcn persissions should be set for Supreme Moderators also
We decided to do the following:
5) Group of banned users. It has restrictions of CREATE_POSTS, EDIT_OWN_POSTS, DELETE_OWN_POSTS for every branch.
We restrict all permissions(exclude VIEW_TOPICS) for every branch of the forum.
7) Group of supreme moderators. This group has all permissions for every branch(exclude "Помойка", "Примеры", "Модераторская").
Remove exclusion in brackets.
Stanislav Bashkyrtsev, what's the difference between Administrators and Supreme moderators? I see just one, supreme moderator should not have group permission for Admin component. If so, I think all brahcn persissions should be set for Supreme Moderators also