Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-918

Concurrent task claiming and editing of metadata possible for same item in submission workflow

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 1.6.2, 1.7.0, 1.7.1
    • Fix Version/s: 1.8.2, 3.0
    • Component/s: DSpace API, XMLUI
    • Labels:
      None
    • Attachments:
      1
    • Comments:
      1
    • Documentation Status:
      Needed

      Description

      Context: EPerson A and EPerson B are in the Edit Workflow group of a collection
      and use XMLUI for workflow.

      It is possible for EPerson B to edit a workflowitem that has been claimed by EPerson A
      if the task list screen in XMLUI was rendered to EPerson B before the task was claimed.
      Both EPersons can edit the same item metadata simultaneously and the resulting metadata
      after both save can, but not always, be a combination of those edits.

      If EPerson B clicks on the link to an individual workflow item in the displayed list, s/he
      is advanced to the screen that should be only for a successful claimer and can then
      select "Edit metadata". So there seem to be several places where checks for workflowitem
      ownership could be made but aren't.

      If on the other hand EPerson B checks an item on such a stale displayed list, then
      the returned list does not show the item in the owned list. However if EPerson A then
      returns the same item to the pool, then B is silently advanced as the owner.

      It is not the case that the dspace-api allows a second eperson to claim the item
      rather it looks like XMLUI ignores the owner and allows another to edit or even see the owner screen
      so the save metadata action is not checking the owner vs. the eperson or ??

      I tested this on both 1.6.2 and 1.7.1 with the same results

      Pertinent code:

      dspace-api/workflow
      xmlui-api/.../java/aspect/submission FlowUtils and workflow/*
      xmlui-api/.../resources/aspect/submission submission.js

        Attachments

          Activity

            People

            • Assignee:
              kevin van de velde Kevin Van de Velde (Atmire)
              Reporter:
              whays Bill Hays
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: