Users with permission to read/write in the system.graph and content.graph 
cannot update permissions of users and roles correctly (permission to refresh 
policy is missing)
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------

                 Key: CLEREZZA-360
                 URL: https://issues.apache.org/jira/browse/CLEREZZA-360
             Project: Clerezza
          Issue Type: Bug
            Reporter: Tsuyoshi Ito


A user with permission to read/write in the system.graph and content.graph can 
delete permissions but is not able to update the permissions of a user or role.

therefore if a user as described above tries to update permissions of a 
user/role he only can delete the permissions but not set it again=> update 
permissions results in removing all directly associated permission of the 
user/role.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to