ucb-rit / coldfront

HPC Resource Allocation System
https://coldfront.readthedocs.io
GNU General Public License v3.0
3 stars 3 forks source link

Ensure that users cannot be added to "New" / "Inactive" / "Archived" projects #585

Open matthew-li opened 6 months ago

matthew-li commented 6 months ago

Check whether users can be added to a Project with the "New", "Inactive", or "Archived" statuses (i.e., answer the following two questions):

  1. "Can a user request to join such a project from the UI?"
  2. "Can a PI/manager of such a project add users to such a project?"

If so, prevent it.

In either case, document in this issue (or a PR) the exact behavior (both in the UI and on the back end) preventing these actions.

haudquaquam commented 5 months ago
  1. "Can a user request to join such a project from the UI?"
    • A user cannot access a Project that is "New," "Inactive," or "Archived" from the "Join a Project" page. Only "Active" Projects are listed.
    • Users also cannot access "New," "Inactive," or "Archived" Projects by going to /project/##, where ## represents the project ID of a Project.
  2. "Can a PI/manager of such a project add users to such a project?"
    • For a "New" Project, no. The PI of a "New" Project can access the "Add a User" button and go through the flow of adding a user, however upon submission, the following error message shows: Project does not have a LBL Project ID for billing. You cannot add users until one is set.
    • For an "Inactive" Project, yes. The PI can access the "Add a User" button and successfully add a user. This probably should not be allowed.
    • For an "Archived" Project, no. The PI cannot make any changes to an "Archived" Project.