vivo-project / VIVO

VIVO is an extensible semantic web application for research discovery and showcasing scholarly work
http://vivoweb.org
BSD 3-Clause "New" or "Revised" License
202 stars 127 forks source link

Fix for VIVO-3949 #3962

Closed litvinovg closed 3 weeks ago

litvinovg commented 3 months ago

VIVO GitHub issue: (please link to issue)

What does this pull request do?

Fixes authorization checks on website forms by providing information about faux property

How should this be tested?

Interested parties

@VIVO-project/vivo-committers

balmas commented 1 month ago

I have confirmed that following the instructions in the PR it works as advertised and note the same as @chenejac that having Add permission also grants Drop permission, even if that permission is removed. I also note that it's not possible to have Edit but not Add. I am not sure there's a scenario where one would want to allow someone to edit their website URL but not add another one, but it is a little inconsistent.