Closed revgum closed 7 years ago
@revgum There's not a very strong "ownership" model at the moment. Should the users listed in the object's edit_users
list, and users in the edit_groups
list, also be able to add works to works? I believe you can do this via an Ability check, which will use hydra-access-controls for the above checks. @jcoyne does that sound right?
@mjgiarlo This is a great question, and somewhat touches on a discussion that @vantuyls and I were having this morning. ApplyOrderActor and AddToWorkActor both cover similar functionality with regard to associating a work to another work (in the parent, or child context) and both would need this type of ownership consideration you're mentioning.
If we can come to a consensus, should the same edit_users
and edit_groups
check happen for both actors?
What do you think, @jcoyne?
Adding a child work which is not owned by the current user fix for Sufia Issue 3042: projecthydra/sufia#3042