[Building Sakai] user cannot delete his own poll

[Steve Swinsburg]

Hi,

Can you raise this as a jira? The above steps are helpful.

cheers,
Steve


On Sat, Jun 29, 2013 at 8:46 AM, Sanghyun Jeon <euksa99 at gmail.com> wrote:

> Sorry for delayed response. Below are my step to replicate my issue on
> Sakai 2.9
> 1)  visit 29x 101 A Spring 2013 site in
> http://nightly2.sakaiproject.org:8087/portal/site/d3300043-710a-41d4-b796-5bedd09f2ceeas admin
> 2) add polls
> 3) change the permission for student: vote on a poll, add a new poll,
> delete your own poll and edit own poll
> 4) go to Admin site and becomes as a student
> 5) create "poll created by student" as a student
> 6) login as a admin again and vote for this poll
> 7) becomes a student again and try to delete the poll, which was created
> by student -- fail to delete it
> 8) login as a admin and create a pwd for ags1 (student userid)
> 9) login as ags1 with the newly created pwd and try to delete the polls --
> fail to delete it
> 10) login as admin and now admin can delete the student's poll, because
> admin has "delete any poll" permission. NOTE: if student has delete any
> poll permission, the student can delete it.
>
> I think "delete your own poll" option does not work for both sakai 2.8 and
> 2.9
>
> S
>
>
> On Wed, Jun 19, 2013 at 10:33 PM, Steve Swinsburg <
> steve.swinsburg at gmail.com> wrote:
>
>> Hi,
>>
>> So just to clarify, a user has poll.deleteOwn permission but cannot
>> delete their own poll?
>>
>> Can you go to nightly2.sakaiproject and try both the 2.8 and 2.9
>> instances there, and try to reproduce and see if you get the same issue?
>> Just create a normal site, add a user, edit the permissions and test. If it
>> occurs in either of those instances, I would also test in the trunk
>> instance and see if that is an issue as well.
>>
>> As Beth mentioned you should be able to run polls 1.5+ in Sakai 2.8, I
>> dont recall anything restricting that. So that is an option if the bug
>> manifests only in the 2.8 nightly instances.
>>
>> cheers,
>> Steve
>>
>>
>> On Thu, Jun 20, 2013 at 3:20 PM, Sanghyun Jeon <euksa99 at gmail.com> wrote:
>>
>>> Thank you for your reply.
>>> I have not heard back from any other developers. I hope you can forward
>>> my email to somebody knows about polls tool. Do you mean Polls 1.5 has no
>>> issue regarding this permission issue? I am wondering whether you have poll
>>> 1.5 and you don't have this permission issue....
>>>
>>> We are really concerned about this issue, because this can be our
>>> blocker for upgrading sakai 2.8 this summer.
>>> Thank you in advance.
>>>
>>> S
>>>
>>>
>>>
>>> On Tue, Jun 18, 2013 at 5:44 AM, Beth Kirschner <bkirschn at umich.edu>wrote:
>>>
>>>> Hi Sanghyun,
>>>>
>>>> I'm forwarding your question to the sakai-dev list, which is the best
>>>> place to ask these sort of questions. If you have developer resources, you
>>>> can try to generate a 2.8 build with Polls 1.5.
>>>>
>>>> - Beth
>>>>
>>>> On Jun 17, 2013, at 7:20 PM, Sanghyun Jeon <euksa99 at gmail.com> wrote:
>>>>
>>>> > Hello,
>>>> >
>>>> > We are using Sakai 2.8 (Polls 1.4.5-SNAPSHOT and its parent is
>>>> purepoms, sakai-standard-tool 2.8.6) with POLL 152 and 159 patches
>>>> >
>>>> > Feature: localized poll permission
>>>> > Problem: we modify TA's permission from vote to 'vote, add,
>>>> deleteOwn, editOwn' and then TA creates and edits his own poll
>>>> successfully, but when TA tries to remove his poll, he gets permission
>>>> error as follows:
>>>> >
>>>> >  [ERROR] org.sakaiproject.poll.tool.params.PollToolBean:203 -
>>>>  Permission Errorjava.lang.SecurityException:
>>>> user:/user/885cc180-8a47-4082-a146-ef09354d375f can't delete poll: 662
>>>> >
>>>> >
>>>> > I've checked POLL 184 but looks like it is for Sakai 2.9.
>>>> > I am wondering whether anybody can help me to resolve this issue.
>>>> >
>>>> > S
>>>> >
>>>> > PS: if we give TA deleteAny permission, he can delete all.
>>>> >
>>>> >
>>>> >
>>>>
>>>>
>>>
>>> _______________________________________________
>>> sakai-dev mailing list
>>> sakai-dev at collab.sakaiproject.org
>>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>>
>>> TO UNSUBSCRIBE: send email to
>>> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of
>>> "unsubscribe"
>>>
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20130629/ae91e654/attachment.html