[Portfolio] View Guidance Permission in Matrix Cells

Maurer, Christopher Wayne chmaurer at iupui.edu
Tue Jun 9 13:34:26 PDT 2009


Yeah, I couldn¹t either.  It would sure simplify/clean up a bit of that
code.

Chris


On 6/9/09 4:22 PM, "Sean Keesler" <sean at keesler.org> wrote:

> I can't think of a good reason to keep guidance secret from anyone.
> 
> --Sean
> 
> 
> On Tue, Jun 9, 2009 at 3:56 PM, Holladay, Bryan
> Andrew<bahollad at indiana.edu> wrote:
>> > All,
>> >
>> > I¹m working on an issue with user¹s not being able to view Guidance because
>> > of incorrect permission checking in the matrix authorizer.  Since IU¹s
>> > changes to the permissions of the matrix, there are exceptions where a
>> users
>> > are not being allowed to view matrix guidance attachments.  Case:  A user
>> > w/o any permissions in the matrix (can¹t eval, review, ect) except a user
>> > has selected that person for feedback and can access the cell via the email
>> > link.  In this case, the ³reviewer² can¹t view Guidance since the matrix
>> > authorizer doesn¹t have the WizardPage Id to check if that ³reviewer² has
>> > been selected by the cell owner to review their cell.
>> >
>> > Now that I set up my problem, my question is:  Do we need to have
>> permission
>> > checks to see if a user can view Guidance Attachments in the matrix cells?
>> >  If you can get into a matrix cell, shouldn¹t you be allowed to view the
>> > Guidance?  Is there a case where you can access the cell and not view the
>> > Guidance?  If not, then I recommend removing these extra permission checks,
>> > helping speed up some load time. :)
>> >
>> > Vote?  Input?
>> >
>> > Thanks,
>> > Bryan
>> > _______________________________________________
>> > portfolio mailing list
>> > portfolio at collab.sakaiproject.org
>> > http://collab.sakaiproject.org/mailman/listinfo/portfolio
>> >
>> > TO UNSUBSCRIBE: send email to portfolio-unsubscribe at collab.sakaiproject.org
>> > with a subject of "unsubscribe"
>> >
> _______________________________________________
> portfolio mailing list
> portfolio at collab.sakaiproject.org
> http://collab.sakaiproject.org/mailman/listinfo/portfolio
> 
> TO UNSUBSCRIBE: send email to portfolio-unsubscribe at collab.sakaiproject.org
> with a subject of "unsubscribe"
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/portfolio/attachments/20090609/fb14e7ed/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2141 bytes
Desc: not available
Url : http://collab.sakaiproject.org/pipermail/portfolio/attachments/20090609/fb14e7ed/attachment.bin 


More information about the portfolio mailing list