openlibhums / openlibhums/janeway
Repository: Manager w/o access to Press shouldn't see Press Manager link in Repository Manager navigation
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 238
- Forks
- 97
- Avg merge
- 9d 1h
- Merged PRs (30d)
- 8
Description
Describe the bug
When accessing the Repository Manager on an account that is assigned Repository Manager permissions but not Press Manager, Superuser, etc permissions, the "Press Manager" link is visible.
Janeway version
1.7.4
To Reproduce
Steps to reproduce the behavior:
- Log into a Janeway Repository with an account that only has Manager permissions for that Repository and not the Press.
- Click on the Repository Manager page.
- Note the "Press Manager" link at the top nav and click the link
- See error (expected): "Permission Denied"
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Reproduce the issue from the Repository Manager page using an account with Repository Manager permission but no Press Manager access. Inspect the Repository Manager navigation entry for the Press Manager link and verify that it is hidden for this account while authorized users retain access and unauthorized direct access still shows Permission Denied.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization, backend
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100