-
Type: Improvement
-
Status: Resolved
-
Priority: Major
-
Resolution: Duplicate
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: Retention
-
Epic Link:
-
Sprint:nxApps 2021 Cycle 1, nxApps 2021 Cycle 2, nxApps 2021 Cycle 3, nxApps 2021 Cycle 4, nxApps 2021 Cycle 6
User story
- As a platform administrator, I want to configure if a granted user can delete a document under retention and/or legal hold.
- As a user with a specific permission and ONLY in case of the retention addon is configured to allow it, I can delete a document under retention or under legal hold, so that I can delete content in case of mistake (wrong retention period) or in case of legal changed with retroactive application.
Description
The goal is to maintain a high level of security by using retention features but with a more flexible mode than the Compliance mode as power users can delete a record under retention or legal hold.
This improvement requires to configure the addon in a specific mode: "Governance" mode and to implement a specific atomic permission: RemoveRecords
Acceptance criteria
When the retention addon is configured in Governance mode:
- As a user with ManageRecord permission, I can NOT delete a document under retention or legal hold
- As a user with write permission but without ManageRecord permission, I can NOT delete a document under retention or legal hold
- As a user with RemoveRecords permission, I can delete a document under retention or legal hold (with confirmation about "record" deletion, UX feedback, this might actually happen by default, but confirm with Carolina Gouveia)
- As an administrator, I can delete a document under retention or legal hold
When the retention addon is NOT configured in Governance mode:
- As a user with ManageRecord permission, I can NOT delete a document under retention or legal hold
- As a user with write permission but without ManageRecord permission, I can NOT delete a document under retention or legal hold
- As a user with RemoveRecords permission, I can NOT delete a document under retention or legal hold
- As an administrator, I can NOT delete a document under retention or legal hold