If a user has WRITE permission to an object, they should see this object in the list
Open
@chrisknoll is already working on this.
Since Nov 21, 2023.
security
- Dominant language
- Java
- Stars
- 151
- Forks
- 183
- Avg merge
- 14m
- Merged PRs (30d)
- 2
Description
Expected behavior
A user with WRITE permission only should see the object in the list of objects of this type (i.e. WRITE permission should be like READ+WRITE)
Actual behavior
The user with WRITE permission but without READ permission can access the object via a direct link, but does not see this object in the list (e.g. cohort characterization analysis in the list of cohort characterizations)
Steps to reproduce behavior
- user1 creates an object (concept set, cohort definition, characterization, pathways, incidence rates, PLE or PLP)
- user1 grants WRITE permission to the object to user2, but does not grant READ permission
- user2 opens a list of objects of this type
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.