Uploaded image for project: 'Nuxeo Web UI'
  1. Nuxeo Web UI
  2. WEBUI-5

Review permission usages on Web UI and Elements

    XMLWordPrintable

    Details

    • Type: Epic
    • Status: Resolved
    • Priority: Minor
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: 2.4.34, 3.0.2
    • Component/s: UI
    • Tags:
    • Team(s):
      UI

      Description

      We need to make sure action availability checks are made against atomic permissions and not UI permissions.

      List of elements to review:

      Elements

      • nuxeo-filters-behavior (uses Write permission for adding tags and publishing, but could probably use WriteProperties and WriteVersion + AddChildren?) (dangerous)
      • nuxeo-delete-blob-button (uses Write permission, but could probably use WriteProperties) - ELEMENTS-1209
      • nuxeo-delete-document-button (uses Remove but could probably use RemoveChildren? - only impacts 10.10) - ELEMENTS-1220

      Web UI

      • nuxeo-document-form-button (uses Write permission, but could be using WriteProperties) - NXP-29466
      • nuxeo-document-attachments (uses Write permission, but could probably use WriteProperties) - NXP-29466
      • nuxeo-collapsible-document-page (uses Write, but bould use WriteProperties) - NXP-29466
      • nuxeo-replace-blob-button (uses Write permission, but could probably use WriteProperties) - NXP-29466
      • nuxeo-note-editor (uses Write permission, but could probably use WriteProperties) - NXP-29466
      • nuxeo-saved-search-actions (uses Write and Everything permissions, but could probably use WriteProperties) - NXP-29466
      • nuxeo-document-viewer (uses Write permission but could be using WriteProperties) - NXP-29466
      • nuxeo-document-versions (uses Write permission, but could maybe use WriteVersion) - WEBUI-35
      • nuxeo-document-create-version (uses Write permission, but could maybe use WriteVersion) - WEBUI-35
      • nuxeo-document-creation-behavior (uses both Write and AddChildren, but only needs the second) - WEBUI-36
      • nuxeo-document-create-button (uses both Everything and Write, but could rely just on AddChildren) - WEBUI-36
      • nuxeo-document-trash-content (uses Everything permission, but could probably use RemoveChildren?) - WEBUI-37
      • nuxeo-delete-documents-button (uses Write permission but could be using RemoveChildren?) - WEBUI-37
      • nuxeo-document-publications (uses Write permission but could be using WriteVersion?) - WEBUI-35
      • nuxeo-unpublish-button (uses Write permission but could be using WriteVersion?) - WEBUI-35

      Out of scope

      • nuxeo-lock-toggle-button (uses Write permission, but could use ReadProperties?) (ELEMENTS)
      • nuxeo-untrash-document-button (uses Write permission, but should be using ???) (ELEMENTS)
      • nuxeo-document-content-behavior (uses Write permission) (dangerous) (Web UI)
      • nuxeo-untrash-documents-button (uses Write permission but could be using ???) (Web UI)
      • nuxeo-document-info-bar (uses Write permission but could be using ???) (Web UI)
      • addon actions

      See list of permissions and permissions analysis.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              gbarata Gabriel Barata
              Participants:
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                PagerDuty

                Error rendering 'com.pagerduty.jira-server-plugin:PagerDuty'. Please contact your Jira administrators.