Similar to issue #4, the current limitation in setDomainCreatePermissions() is that I can't call it successfully if I don't have granting rights on a permission granted by someone else, because it would either be an unauthorized add/remove (depending on if I specified such a permission).
We want to be able to call setDomainCreatePermissions() with the current direct domain create permissions, without affecting anything.
In other words:
If grantor G has permission to grant domain create permission P on domain D to accessor A, then G should be able to call setDomainCreatePermissions() with a set that includes any current direct domain create permissions to which G does not have granting rights, in order for G to make use of his granting rights to P.
Todo:
fix setDomainCreatePermissions() to allow re-setting of current direct domain create permissions when grantor does not have granting rights
ensure to correctly up/downgrade permissions with grant, including post-create permissions
Similar to issue #4, the current limitation in
setDomainCreatePermissions()
is that I can't call it successfully if I don't have granting rights on a permission granted by someone else, because it would either be an unauthorized add/remove (depending on if I specified such a permission).We want to be able to call
setDomainCreatePermissions()
with the current direct domain create permissions, without affecting anything.In other words: If grantor G has permission to grant domain create permission P on domain D to accessor A, then G should be able to call
setDomainCreatePermissions()
with a set that includes any current direct domain create permissions to which G does not have granting rights, in order for G to make use of his granting rights to P.Todo:
setDomainCreatePermissions()
to allow re-setting of current direct domain create permissions when grantor does not have granting rights