[jira] [Commented] (AIRAVATA-2011) User A shared the 'Default Project' with User B. User B can edit the project.

["Jeff Kinnison (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AIRAVATA-2011?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15406442#comment-15406442 ] 

Jeff Kinnison commented on AIRAVATA-2011:
-----------------------------------------

The fix here seems to be disabling edit capabilities for users with read permission only, is that correct?

> User A shared the 'Default Project' with User B. User B can edit the project.
> -----------------------------------------------------------------------------
>
>                 Key: AIRAVATA-2011
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2011
>             Project: Airavata
>          Issue Type: Bug
>          Components: PGA PHP Web Gateway
>    Affects Versions: 0.17-SNAPSHOT
>         Environment: https://dev.seagrid.org
>            Reporter: Eroma
>            Assignee: Jeff Kinnison
>         Attachments: Screen Shot 2016-07-26 at 3.20.44 PM.png
>
>
> User A shares the 'Default Project' with User B only giving read access.
> User B logged in and for him Edit project icon for the shared project is enabled (Issue 1: This project should not appear as editable for User B since he only has read access)
> He was able to share the project with another user with write access and upon saving the changes got the error screen. (Issue 2: error should have handled with proper error messages)



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)