[Portfolio] View Guidance Permission in Matrix Cells

Sean Keesler sean at keesler.org
Tue Jun 9 13:22:44 PDT 2009

I can't think of a good reason to keep guidance secret from anyone.


On Tue, Jun 9, 2009 at 3:56 PM, Holladay, Bryan
Andrew<bahollad at indiana.edu> wrote:
> All,
> I’m working on an issue with user’s not being able to view Guidance because
> of incorrect permission checking in the matrix authorizer.  Since IU’s
> changes to the permissions of the matrix, there are exceptions where a users
> are not being allowed to view matrix guidance attachments.  Case:  A user
> w/o any permissions in the matrix (can’t eval, review, ect) except a user
> has selected that person for feedback and can access the cell via the email
> link.  In this case, the “reviewer” can’t view Guidance since the matrix
> authorizer doesn’t have the WizardPage Id to check if that “reviewer” has
> been selected by the cell owner to review their cell.
> Now that I set up my problem, my question is:  Do we need to have permission
> checks to see if a user can view Guidance Attachments in the matrix cells?
>  If you can get into a matrix cell, shouldn’t you be allowed to view the
> Guidance?  Is there a case where you can access the cell and not view the
> Guidance?  If not, then I recommend removing these extra permission checks,
> helping speed up some load time. :)
> Vote?  Input?
> Thanks,
> Bryan
> _______________________________________________
> portfolio mailing list
> portfolio at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/portfolio
> TO UNSUBSCRIBE: send email to portfolio-unsubscribe at collab.sakaiproject.org
> with a subject of "unsubscribe"

More information about the portfolio mailing list