[Building Sakai] user cannot delete his own poll

[Sanghyun Jeon]

Poll 193
https://jira.sakaiproject.org/browse/POLL-193 has been created.

S


On Sat, Jun 29, 2013 at 6:31 AM, Steve Swinsburg
<steve.swinsburg at gmail.com>wrote:

> Hi,
>
> Can you raise this as a jira? The above steps are helpful.
>
> cheers,
> Steve
>
>
> On Sat, Jun 29, 2013 at 8:46 AM, Sanghyun Jeon <euksa99 at gmail.com> wrote:
>
>> Sorry for delayed response. Below are my step to replicate my issue on
>> Sakai 2.9
>> 1)  visit 29x 101 A Spring 2013 site in
>> http://nightly2.sakaiproject.org:8087/portal/site/d3300043-710a-41d4-b796-5bedd09f2ceeas admin
>> 2) add polls
>> 3) change the permission for student: vote on a poll, add a new poll,
>> delete your own poll and edit own poll
>> 4) go to Admin site and becomes as a student
>> 5) create "poll created by student" as a student
>> 6) login as a admin again and vote for this poll
>> 7) becomes a student again and try to delete the poll, which was created
>> by student -- fail to delete it
>> 8) login as a admin and create a pwd for ags1 (student userid)
>> 9) login as ags1 with the newly created pwd and try to delete the polls
>> -- fail to delete it
>> 10) login as admin and now admin can delete the student's poll, because
>> admin has "delete any poll" permission. NOTE: if student has delete any
>> poll permission, the student can delete it.
>>
>> I think "delete your own poll" option does not work for both sakai 2.8
>> and 2.9
>>
>> S
>>
>>
>> On Wed, Jun 19, 2013 at 10:33 PM, Steve Swinsburg <
>> steve.swinsburg at gmail.com> wrote:
>>
>>> Hi,
>>>
>>> So just to clarify, a user has poll.deleteOwn permission but cannot
>>> delete their own poll?
>>>
>>> Can you go to nightly2.sakaiproject and try both the 2.8 and 2.9
>>> instances there, and try to reproduce and see if you get the same issue?
>>> Just create a normal site, add a user, edit the permissions and test. If it
>>> occurs in either of those instances, I would also test in the trunk
>>> instance and see if that is an issue as well.
>>>
>>> As Beth mentioned you should be able to run polls 1.5+ in Sakai 2.8, I
>>> dont recall anything restricting that. So that is an option if the bug
>>> manifests only in the 2.8 nightly instances.
>>>
>>> cheers,
>>> Steve
>>>
>>>
>>> On Thu, Jun 20, 2013 at 3:20 PM, Sanghyun Jeon <euksa99 at gmail.com>wrote:
>>>
>>>> Thank you for your reply.
>>>> I have not heard back from any other developers. I hope you can forward
>>>> my email to somebody knows about polls tool. Do you mean Polls 1.5 has no
>>>> issue regarding this permission issue? I am wondering whether you have poll
>>>> 1.5 and you don't have this permission issue....
>>>>
>>>> We are really concerned about this issue, because this can be our
>>>> blocker for upgrading sakai 2.8 this summer.
>>>> Thank you in advance.
>>>>
>>>> S
>>>>
>>>>
>>>>
>>>> On Tue, Jun 18, 2013 at 5:44 AM, Beth Kirschner <bkirschn at umich.edu>wrote:
>>>>
>>>>> Hi Sanghyun,
>>>>>
>>>>> I'm forwarding your question to the sakai-dev list, which is the best
>>>>> place to ask these sort of questions. If you have developer resources, you
>>>>> can try to generate a 2.8 build with Polls 1.5.
>>>>>
>>>>> - Beth
>>>>>
>>>>> On Jun 17, 2013, at 7:20 PM, Sanghyun Jeon <euksa99 at gmail.com> wrote:
>>>>>
>>>>> > Hello,
>>>>> >
>>>>> > We are using Sakai 2.8 (Polls 1.4.5-SNAPSHOT and its parent is
>>>>> purepoms, sakai-standard-tool 2.8.6) with POLL 152 and 159 patches
>>>>> >
>>>>> > Feature: localized poll permission
>>>>> > Problem: we modify TA's permission from vote to 'vote, add,
>>>>> deleteOwn, editOwn' and then TA creates and edits his own poll
>>>>> successfully, but when TA tries to remove his poll, he gets permission
>>>>> error as follows:
>>>>> >
>>>>> >  [ERROR] org.sakaiproject.poll.tool.params.PollToolBean:203 -
>>>>>  Permission Errorjava.lang.SecurityException:
>>>>> user:/user/885cc180-8a47-4082-a146-ef09354d375f can't delete poll: 662
>>>>> >
>>>>> >
>>>>> > I've checked POLL 184 but looks like it is for Sakai 2.9.
>>>>> > I am wondering whether anybody can help me to resolve this issue.
>>>>> >
>>>>> > S
>>>>> >
>>>>> > PS: if we give TA deleteAny permission, he can delete all.
>>>>> >
>>>>> >
>>>>> >
>>>>>
>>>>>
>>>>
>>>> _______________________________________________
>>>> sakai-dev mailing list
>>>> sakai-dev at collab.sakaiproject.org
>>>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>>>
>>>> TO UNSUBSCRIBE: send email to
>>>> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
>>>> "unsubscribe"
>>>>
>>>
>>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130701/86051d8c/attachment.html