Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix an issue with annotation permissions. #428

Merged
merged 1 commit into from
Mar 26, 2020
Merged

Conversation

manthey
Copy link
Member

@manthey manthey commented Mar 19, 2020

If a user or group has been removed from the system such that it still exists in an access control list, when the access list is read, Girder prunes the missing users and groups and writes back the access list.
However, for annotations, this could cause a save with an empty array of elements, effectively removing the elements from the annotation. This, instead, updates the annotation's access list.

If a user or group has been removed from the system such that it still
exists in an access control list, when the access list is read, Girder
prunes the missing users and groups and writes back the access list.
However, for annotations, this could cause a save with an empty array of
elements, effectively removing the elements from the annotation.  This,
instead, updates the annotation's access list.
Copy link
Collaborator

@kheffah kheffah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this makes sense. @dgutman When you get the time can you use this branch so we can make sure we test that this fixes the bug on our server before we merge this into master?

Copy link
Collaborator

@kheffah kheffah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dgutman used this branch and I can confirm that the bug can no longer be triggered after this fix.

@manthey manthey merged commit 951abd7 into master Mar 26, 2020
@manthey manthey deleted the annotations-permissions branch March 26, 2020 15:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants