#725: BibEdit: more flexible collection check
-------------------------+----------------------
Reporter: simko | Owner: jmartinm
Type: enhancement | Status: new
Priority: major | Milestone:
Component: BibEdit | Version:
Keywords: |
-------------------------+----------------------
Currently, BibEdit checks whether a given user has rights to edit a given
record via checking the given record's primary collection attribution (via
`guess_primary_collection_of_a_record()`). This is not practical in cases
of deep collection tree when we would like to give access to a person to
edit records belonging to a particular collection and all its daughter
collections in one go.
It would be good to amend BibEdit access checking rules in order to grant
editing rights to cover this use case without having to list all the
daughter collections. Namely, if a user has configured rights to edit
collection C, and he/she tries to edit record Ri that belongs to
collection Cj, currently the system refuses; but in cases when Cj is a
daughter collection of C, or grand-daughter collection of C etc -- IOW
when Ri belongs both to Cj and C -- the user should be permitted to edit
this record.
(Note that some care is to be paid to restricted daughter collections and
to hidden collections, which is why I mentioned to check whether Ri really
belongs to both Cj and C, and not only to check whether Cj is daughter of
C from the tree point of view.)
--
Ticket URL: <http://invenio-software.org/ticket/725>
Invenio <http://invenio-software.org>
