[Portfolio] View Guidance Permission in Matrix Cells
Ward, Lynn E.
leward at iupui.edu
Tue Jun 9 13:49:15 PDT 2009
I'm all for keeping the permissions as transparent as possible. Since we don't have an editable permission for viewing guidance attachments (and since in past releases anyone who could view the cell could also view attachments), let's get rid of whatever is preventing invited reviewers from viewing guidance attachments.
Lynn Ward, Principal Systems Analyst, Academic and Faculty Services
University Information Technology Services<http://uits.iu.edu/>
Indiana University-Purdue University Indianapolis
Information Technology and Communications Complex (IT 218R)
535 West Michigan Street, Indianapolis, IN 46202
Phone: 317-278-5713 E-mail: leward at iupui.edu<mailto:leward at iupui.edu>
From: portfolio-bounces at collab.sakaiproject.org [mailto:portfolio-bounces at collab.sakaiproject.org] On Behalf Of Maurer, Christopher Wayne
Sent: Tuesday, June 09, 2009 4:34 PM
To: Sean Keesler; Holladay, Bryan Andrew
Cc: portfolio at collab.sakaiproject.org
Subject: Re: [Portfolio] View Guidance Permission in Matrix Cells
Yeah, I couldn't either. It would sure simplify/clean up a bit of that code.
On 6/9/09 4:22 PM, "Sean Keesler" <sean at keesler.org> wrote:
I can't think of a good reason to keep guidance secret from anyone.
On Tue, Jun 9, 2009 at 3:56 PM, Holladay, Bryan
Andrew<bahollad at indiana.edu> wrote:
> I'm working on an issue with user's not being able to view Guidance because
> of incorrect permission checking in the matrix authorizer. Since IU's
> changes to the permissions of the matrix, there are exceptions where a users
> are not being allowed to view matrix guidance attachments. Case: A user
> w/o any permissions in the matrix (can't eval, review, ect) except a user
> has selected that person for feedback and can access the cell via the email
> link. In this case, the "reviewer" can't view Guidance since the matrix
> authorizer doesn't have the WizardPage Id to check if that "reviewer" has
> been selected by the cell owner to review their cell.
> Now that I set up my problem, my question is: Do we need to have permission
> checks to see if a user can view Guidance Attachments in the matrix cells?
> If you can get into a matrix cell, shouldn't you be allowed to view the
> Guidance? Is there a case where you can access the cell and not view the
> Guidance? If not, then I recommend removing these extra permission checks,
> helping speed up some load time. :)
> Vote? Input?
> portfolio mailing list
> portfolio at collab.sakaiproject.org
> TO UNSUBSCRIBE: send email to portfolio-unsubscribe at collab.sakaiproject.org
> with a subject of "unsubscribe"
portfolio mailing list
portfolio at collab.sakaiproject.org
TO UNSUBSCRIBE: send email to portfolio-unsubscribe at collab.sakaiproject.org with a subject of "unsubscribe"
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the portfolio