Ticket #1025 (closed enhancement: fixed)

Opened 3 years ago

Last modified 3 years ago

Default authz can be set in config

Reported by: dread Owned by: dread
Priority: blocker Milestone: ckan-v1.4-sprint-3
Component: ckan Keywords:
Cc: Repository:


Currently the default authz for a package is hard-coded to:

 <PackageRole user="visitor" role="editor" context="Package">,
 <PackageRole user="logged_in" role="editor" context="Package">,

This should be configurable in the config, so that you can have a more locked down instance etc.

Change History

comment:1 Changed 3 years ago by dread

  • Status changed from new to closed
  • Resolution set to fixed

Done in enh-1025-config-default-authz and goes into release 1.3.2.

comment:2 Changed 3 years ago by rgrp

(Link to changeset). Could you briefly clarify why this was needed in config -- we already have a process for putting things into a more restricted mode (see ticket:833) and have been working on creating a WUI to be able to do this automatically (see that ticket).

comment:3 Changed 3 years ago by dread

Thanks for pointing this out. Although changing the definition of 'editor' to not allow edit (as you admit) is a bit hacky, and I think prone to confusion. James and I weren't aware there was a precedent for doing it this way, but if we had, we may well have followed it.

I mentioned the branch for this cset, in preference to the csets.

Note: See TracTickets for help on using tickets.