Skip to content

Commit

Permalink
extended possibility to go deeper into the datamanagergroup removal c…
Browse files Browse the repository at this point in the history
…heck in error situation as an admin
  • Loading branch information
HarmdR committed Sep 26, 2023
1 parent 0b13893 commit b8f9276
Showing 1 changed file with 5 additions and 4 deletions.
9 changes: 5 additions & 4 deletions uuGroupPolicyChecks.r
Original file line number Diff line number Diff line change
Expand Up @@ -361,10 +361,11 @@ uuGroupPolicyCanGroupRemove(*actor, *groupName, *allowed, *reason) {

uuGroupUserIsManager(*groupName, *actor, *isManager);
if (*isManager || *actorUserType == "rodsadmin") {
# v These groups are user-removable v
if (*groupName like regex "(grp|intake|research|deposit|vault)-.*") {
# NB: Only rodsadmin can remove datamanager groups.
# Even datamanager group managers cannot remove their own group.
# Only a rodsadmin can remove a datamanager-group
# Even datamanager group managers cannot remove their own group.
# v These groups are user-removable v
if (*groupName like regex "(grp|intake|research|deposit|vault)-.*"
|| (*groupName like regex "(datamanager)-.*") && *actorUserType == "rodsadmin") {
*homeCollection = "/$rodsZoneClient/home/*groupName";
*homeCollectionIsEmpty = true;

Expand Down

0 comments on commit b8f9276

Please sign in to comment.