CKAN: Ticket #2863: non-admin users can edit other's draft datasets

toby — Thu, 16 Aug 2012 13:06:24 GMT

@ira,

This is actually working correctly but the permissions on the server s031 are not what you want

I do not know how or where these are defined - he has package_update permissions from somewhere

maybe ross or someone knows

ross — Thu, 16 Aug 2012 13:14:36 GMT

This is changeable in config. The default permissions are specified in there I believe.

shevski — Thu, 16 Aug 2012 13:30:24 GMT

If by default it doesn't happen, then that's fine & we can close this.

Any way for me to see how permissions are set?

ross — Thu, 16 Aug 2012 13:32:58 GMT

No idea :|

The perms are commented out by default in the template ini file. You should take a look at the ini file and see how it is setup, search for ckan.default_roles.Package but I can't see how Daniel would have been granted read access without the auth pages being implemented.

milestone changed

toby — Fri, 17 Aug 2012 11:05:02 GMT

milestone changed from demo phase 3 to demo phase 4

@ira,

I am moving this to phase 4 as it's not going to be looked at till the new permissions stuff is agreed