search

galaxyproject / galaxy

Data intensive science for everyone.
https://galaxyproject.org
Other
1.39k stars 999 forks source link

Adding datasets to library gives too restrictive permissions with no way to change. #5897

Open hexylena opened 6 years ago

hexylena commented 6 years ago

I added some datasets to a library via the UI

auswahl_012

And they're all private to me. No option to change this globally.

auswahl_011

I'm writing a parsec script to fix this but this is really sub-optimal that there's no way to set default permissions in the UI when batch-adding hundreds of datasets from disk. Or to batch chown -R with new permissions after the fact.

Similar to @joachimwolff's issue today, #5894

scholtalbers commented 6 years ago

And related #5568

pavanvidem commented 6 years ago

Any update on this? Thank you!

hexylena commented 6 years ago

@bebatut encountered this issue today. (Edit: I was somewhat emotional when I wrote this, I have re-edited it to be a clearer and more useful comment)

Steps to reproduce

  1. Data library with permissions: manage=admin, add=<lecturer-role>, modify=<lecturer-role> (it's via a role relationship, in case that matters.)
  2. In a folder in that library with identical permissions:
  3. Add a dataset to the folder
  4. It will be created with permissions: manage=admin, access=<specific-user-that-added-it>, modify=<lecturer-role>

As a result, the datasets become visible only to the user, and despite the uesr's permissions at the library level (add/modify), they cannot change any permissions on the dataset.

In trying to delegate administration of data libraries to users (without granting them admin permissions), I (naively) expected that allowing users to add datasets and modify them would additionally grant permissions to manage permissions on datasets. Or at least give the user the choice to make it public.

xref