Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How does an authenticated user create a media? #1091

Open
Natkeeran opened this issue Apr 16, 2019 · 2 comments
Open

How does an authenticated user create a media? #1091

Natkeeran opened this issue Apr 16, 2019 · 2 comments
Labels
Subject: Access Control related to managing roles and permissions/information security.

Comments

@Natkeeran
Copy link
Contributor

An authenticated user with fcrepoAdmin role is needed to sync a Repository Item (node) to Fedora. Giving "Repository Item: Create new content" permission enables the authenticated user to create the repository object. However, it not clear what permissions are needed to show the Media tab and let the user create media objects associated with that repository item.

@Natkeeran Natkeeran changed the title How does an authenticated user creates a media? How does an authenticated user create a media? Apr 26, 2019
@Natkeeran
Copy link
Contributor Author

@dannylamb Just bringing this to your attention.

@dannylamb
Copy link
Contributor

It would be nice if 'view media' showed the tab... That's certainly more appropriate than what's happening now, which is no restrictions whatsoever.

Creating media in general is bound to the permissions much like content. So any of the permissions to do write operations for any media type (or the general 'all media') should still apply. And they can come from any role. The fcrepoadmin role doesn't really need anything. It's just slapped into the JWT if the user has that role, and that's what lets us write anything to Fedora.

@kstapelfeldt kstapelfeldt added Subject: Access Control related to managing roles and permissions/information security. and removed Access control labels Sep 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Subject: Access Control related to managing roles and permissions/information security.
Projects
Development

No branches or pull requests

3 participants