We need to make sure action availability checks are made against atomic permissions and not UI permissions.
List of elements to review:
Elements
- nuxeo-filters-behavior (uses Write permission for adding tags and publishing, but could probably use WriteProperties and WriteVersion + AddChildren?) (dangerous)
- nuxeo-delete-blob-button (uses Write permission, but could probably use WriteProperties) -
ELEMENTS-1209 - nuxeo-delete-document-button (uses Remove but could probably use RemoveChildren? - only impacts 10.10) -
ELEMENTS-1220
Web UI
- nuxeo-document-form-button (uses Write permission, but could be using WriteProperties) -
NXP-29466 - nuxeo-document-attachments (uses Write permission, but could probably use WriteProperties) -
NXP-29466 - nuxeo-collapsible-document-page (uses Write, but bould use WriteProperties) -
NXP-29466 - nuxeo-replace-blob-button (uses Write permission, but could probably use WriteProperties) -
NXP-29466 - nuxeo-note-editor (uses Write permission, but could probably use WriteProperties) -
NXP-29466 - nuxeo-saved-search-actions (uses Write and Everything permissions, but could probably use WriteProperties) -
NXP-29466 - nuxeo-document-viewer (uses Write permission but could be using WriteProperties) -
NXP-29466 - nuxeo-document-versions (uses Write permission, but could maybe use WriteVersion) -
WEBUI-35 - nuxeo-document-create-version (uses Write permission, but could maybe use WriteVersion) -
WEBUI-35 - nuxeo-document-creation-behavior (uses both Write and AddChildren, but only needs the second) -
WEBUI-36 - nuxeo-document-create-button (uses both Everything and Write, but could rely just on AddChildren) -
WEBUI-36 - nuxeo-document-trash-content (uses Everything permission, but could probably use RemoveChildren?) -
WEBUI-37 - nuxeo-delete-documents-button (uses Write permission but could be using RemoveChildren?) -
WEBUI-37 - nuxeo-document-publications (uses Write permission but could be using WriteVersion?) -
WEBUI-35 - nuxeo-unpublish-button (uses Write permission but could be using WriteVersion?) -
WEBUI-35
Out of scope
- nuxeo-lock-toggle-button (uses Write permission, but could use ReadProperties?) (ELEMENTS)
- nuxeo-untrash-document-button (uses Write permission, but should be using ???) (ELEMENTS)
- nuxeo-document-content-behavior (uses Write permission) (dangerous) (Web UI)
- nuxeo-untrash-documents-button (uses Write permission but could be using ???) (Web UI)
- nuxeo-document-info-bar (uses Write permission but could be using ???) (Web UI)
- addon actions
See list of permissions and permissions analysis.