[Building Sakai] user cannot delete his own poll

[Sanghyun Jeon]

Sorry for delayed response. Below are my step to replicate my issue on
Sakai 2.9
1)  visit 29x 101 A Spring 2013 site in
http://nightly2.sakaiproject.org:8087/portal/site/d3300043-710a-41d4-b796-5bedd09f2ceeas
admin
2) add polls
3) change the permission for student: vote on a poll, add a new poll,
delete your own poll and edit own poll
4) go to Admin site and becomes as a student
5) create "poll created by student" as a student
6) login as a admin again and vote for this poll
7) becomes a student again and try to delete the poll, which was created by
student -- fail to delete it
8) login as a admin and create a pwd for ags1 (student userid)
9) login as ags1 with the newly created pwd and try to delete the polls --
fail to delete it
10) login as admin and now admin can delete the student's poll, because
admin has "delete any poll" permission. NOTE: if student has delete any
poll permission, the student can delete it.

I think "delete your own poll" option does not work for both sakai 2.8 and
2.9

S


On Wed, Jun 19, 2013 at 10:33 PM, Steve Swinsburg <steve.swinsburg at gmail.com
> wrote:

> Hi,
>
> So just to clarify, a user has poll.deleteOwn permission but cannot delete
> their own poll?
>
> Can you go to nightly2.sakaiproject and try both the 2.8 and 2.9 instances
> there, and try to reproduce and see if you get the same issue? Just create
> a normal site, add a user, edit the permissions and test. If it occurs in
> either of those instances, I would also test in the trunk instance and see
> if that is an issue as well.
>
> As Beth mentioned you should be able to run polls 1.5+ in Sakai 2.8, I
> dont recall anything restricting that. So that is an option if the bug
> manifests only in the 2.8 nightly instances.
>
> cheers,
> Steve
>
>
> On Thu, Jun 20, 2013 at 3:20 PM, Sanghyun Jeon <euksa99 at gmail.com> wrote:
>
>> Thank you for your reply.
>> I have not heard back from any other developers. I hope you can forward
>> my email to somebody knows about polls tool. Do you mean Polls 1.5 has no
>> issue regarding this permission issue? I am wondering whether you have poll
>> 1.5 and you don't have this permission issue....
>>
>> We are really concerned about this issue, because this can be our blocker
>> for upgrading sakai 2.8 this summer.
>> Thank you in advance.
>>
>> S
>>
>>
>>
>> On Tue, Jun 18, 2013 at 5:44 AM, Beth Kirschner <bkirschn at umich.edu>wrote:
>>
>>> Hi Sanghyun,
>>>
>>> I'm forwarding your question to the sakai-dev list, which is the best
>>> place to ask these sort of questions. If you have developer resources, you
>>> can try to generate a 2.8 build with Polls 1.5.
>>>
>>> - Beth
>>>
>>> On Jun 17, 2013, at 7:20 PM, Sanghyun Jeon <euksa99 at gmail.com> wrote:
>>>
>>> > Hello,
>>> >
>>> > We are using Sakai 2.8 (Polls 1.4.5-SNAPSHOT and its parent is
>>> purepoms, sakai-standard-tool 2.8.6) with POLL 152 and 159 patches
>>> >
>>> > Feature: localized poll permission
>>> > Problem: we modify TA's permission from vote to 'vote, add, deleteOwn,
>>> editOwn' and then TA creates and edits his own poll successfully, but when
>>> TA tries to remove his poll, he gets permission error as follows:
>>> >
>>> >  [ERROR] org.sakaiproject.poll.tool.params.PollToolBean:203 -
>>>  Permission Errorjava.lang.SecurityException:
>>> user:/user/885cc180-8a47-4082-a146-ef09354d375f can't delete poll: 662
>>> >
>>> >
>>> > I've checked POLL 184 but looks like it is for Sakai 2.9.
>>> > I am wondering whether anybody can help me to resolve this issue.
>>> >
>>> > S
>>> >
>>> > PS: if we give TA deleteAny permission, he can delete all.
>>> >
>>> >
>>> >
>>>
>>>
>>
>> _______________________________________________
>> sakai-dev mailing list
>> sakai-dev at collab.sakaiproject.org
>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>
>> TO UNSUBSCRIBE: send email to
>> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
>> "unsubscribe"
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130628/e0a55d78/attachment.html