non-admin users can edit other's draft datasets

[shevski]

edit button shows up for daniel lewis for ​http://s031.okserver.org:2375/dataset/ff

[toby]

@ira,

This is actually working correctly but the permissions on the server s031 are not what you want

I do not know how or where these are defined - he has package_update permissions from somewhere

maybe ross or someone knows

[ross]

This is changeable in config. The default permissions are specified in there I believe.

[shevski]

If by default it doesn't happen, then that's fine & we can close this.

Any way for me to see how permissions are set?

[ross]

No idea :|

The perms are commented out by default in the template ini file. You should take a look at the ini file and see how it is setup, search for ckan.default_roles.Package but I can't see how Daniel would have been granted read access without the auth pages being implemented.

[toby]

@ira,

I am moving this to phase 4 as it's not going to be looked at till the new permissions stuff is agreed