Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

  •  
     
    story #24980 forbid modifications of document properties by WRITERS
Actions
Summary
Empty
forbid modifications of document properties by WRITERS

I can let writers create documents but do not let them modify. It's useful when the documentation has compliance impact.

Overview

The implementation is done at "docman" level and applies to everything that depend on docman: SOAP & REST APIs, WebDav as well as Document plugin.

Docman administration

The behaviour is configured in docman administration, in "Manage permissions" page. This page will have 2 sections:

  • Docman administrators (the current selector)
  • Restricted permissions

In Restricted permission section, there is a switch "Forbid modifications of document properties by Writers" (default is disabled) Help: "When turned on, Writers will be allowed to set properties when they create a new document but will no longer be able to modify them afterward".

The "Manage permission" page is converted to Burning Parrot.

Note: the Manager permission is not affected (neither are Docman Administrators)

Enforcement of the restriction

The restriction applies:

  • in SOAP API
  • in REST API
  • in WebDav (via document title, it means that it will be only possible to create a new version of the same document. Should be already the case but to be verified and enforced)
  • in docman "legacy" interface
  • in Document app
Empty
Empty
Status
Empty
Done
Development
  • [ ] Does it involves User Interface? 
  • [ ] Are there any mockups?
  • [ ] Are permissions checked?
  • [ ] Does it need Javascript development?
  • [ ] Does it need a forge upgrade bucket?
  • [ ] Does it need to execute things in system events?
  • [ ] Does it impact project creation (templates)?
  • [ ] Is it exploratory?
Empty
Details
#24980
Manuel Vacelet (vaceletm)
2022-03-29 14:04
2022-01-06 10:41
3608

References
Artifact links
Referencing story #24980

Artifact Tracker v5

epic #24167 Document circa 2022
story #24981 forbid deletion of documents and versions by WRITERS
rel #25338 13.7

Git commit

tuleap/tuleap/stable

feat: Add option to forbid Writers to update item cce06a3669
User avatar Nicolas Terray (nterray) , 2022-03-07 19:33
feat: forbid Writers to update properties of item b85c2b9c53
User avatar Nicolas Terray (nterray) , 2022-03-09 15:05
chore: Bump sabre/dav 4.3.0 -> 4.3.1 928274ec80
User avatar Nicolas Terray (nterray) , 2022-03-09 18:28
chore: covers ForbidWriters with REST tests d2c0587613
User avatar Nicolas Terray (nterray) , 2022-03-10 15:00
feat: Webdav has its own log file b348f8659d
User avatar Nicolas Terray (nterray) , 2022-03-10 14:32
fix: Design check on permissions administration 54bfb33c6c
User avatar Nicolas Terray (nterray) , 2022-03-11 10:16
chore: Sabre\DAV\Server::exec() is deprecated 843d8e6939
User avatar Nicolas Terray (nterray) , 2022-03-11 11:14
Display settings

Follow-ups

User avatar
Clarck Robinson (robinsoc)2022-03-08 09:07

gerrit #25296 integrated into Tuleap 13.6.99.21.

  • Acceptance criteria
    Something went wrong, the follow up content couldn't be loaded
    Only formatting have been changed, you should switch to markup to see the changes