Uploaded image for project: 'Islandora'
  1. Islandora
  2. ISLANDORA-612

XACML Editor should provide descriptive messages when user tries to perform a prohibited action

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Minor
    • Resolution: Won't Fix
    • Fix Version/s: None
    • Component/s: XACML Editor
    • Labels:
      None

      Description

      In some cases a user without permission to perform certain actions (based on XACML policies) will still see those actions as options on their screen due to Drupal permissions. For example, if a user has Drupal permission to use the XACML Editor, but a XACML permission prohibits them from editing a certain object, they may still be able to see the XACML editor for that object. However, when they try to save any changes made on the editor screen it fails (correctly) due to XACML policy enforcement.

      This is all working as intended, but when such an action fails the user gets a generic Fedora error message (can't modify Datastream, etc.) instead of a relevant message about XACML permissions. We should provide more relevant information to the user in this case so they will know that their action failed due to XACML policy enforcement rather than a Fedora error.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              dwilcox David Wilcox
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: