[Portfolio] View Guidance Permission in Matrix Cells
sean at keesler.org
Tue Jun 9 13:22:44 PDT 2009
I can't think of a good reason to keep guidance secret from anyone.
On Tue, Jun 9, 2009 at 3:56 PM, Holladay, Bryan
Andrew<bahollad at indiana.edu> wrote:
> I’m working on an issue with user’s not being able to view Guidance because
> of incorrect permission checking in the matrix authorizer. Since IU’s
> changes to the permissions of the matrix, there are exceptions where a users
> are not being allowed to view matrix guidance attachments. Case: A user
> w/o any permissions in the matrix (can’t eval, review, ect) except a user
> has selected that person for feedback and can access the cell via the email
> link. In this case, the “reviewer” can’t view Guidance since the matrix
> authorizer doesn’t have the WizardPage Id to check if that “reviewer” has
> been selected by the cell owner to review their cell.
> Now that I set up my problem, my question is: Do we need to have permission
> checks to see if a user can view Guidance Attachments in the matrix cells?
> If you can get into a matrix cell, shouldn’t you be allowed to view the
> Guidance? Is there a case where you can access the cell and not view the
> Guidance? If not, then I recommend removing these extra permission checks,
> helping speed up some load time. :)
> Vote? Input?
> portfolio mailing list
> portfolio at collab.sakaiproject.org
> TO UNSUBSCRIBE: send email to portfolio-unsubscribe at collab.sakaiproject.org
> with a subject of "unsubscribe"
More information about the portfolio