I think this is a symptom of a larger problem, which is that the DRI only seems to have a sense of two kinds of authenticated users: people with no privileges and people with all privileges.
What I really want to know is a sense of *contextual* privilege: what can this person do on this page? Knowing that would let me do things like bring back the "edit" button on item pages, which I would truly appreciate. Dorothea -- Dorothea Salo [EMAIL PROTECTED] Digital Repository Librarian AIM: mindsatuw University of Wisconsin Rm 218, Memorial Library (608) 262-5493 On Tue, Nov 25, 2008 at 9:45 AM, Floyd, Randall Dean <[EMAIL PROTECTED]> wrote: > Hi all, > > I had asked the list about this one last week but didn't get any > responses, so I'm going to try once more before creating a bug report. > > What I am seeing in the XMLUI on DSpace 1.5.1 is that the navigation > options list contains all of the administrative links for a user > whether they are an administrator or not. If the non-admin user clicks > one of those links they get an authorization error. > > At first I thought this was a browser caching problem of some sort, or > maybe even a CSS visibility error on my part, but if I view the DRI the > options actually contains the admin-specific link list items in the > following list sets: > > aspect.artifactbrowser.Navigation.list.context > aspect.artifactbrowser.Navigation.list.administrative > > In other words, according to the DRI before the transformation, > DSpace/XMLUI thinks this user should have those list items in their > context when in actuality they are only authorized to submit to the > collection. > > I can replicate this with the unmodified reference theme and my other > developer sees it with her own local workstation environments, so I'm > thinking I can't be the only person to have seen this. > > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's challenge > Build the coolest Linux based applications with Moblin SDK & win great prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > DSpace-tech mailing list > DSpace-tech@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/dspace-tech > ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ DSpace-tech mailing list DSpace-tech@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/dspace-tech
