[jira] [Commented] (AIRAVATA-2005) When a shared user removed from a cloned experiment still experiment appears with the removed user

["Jeff Kinnison (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/AIRAVATA-2005?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15406417#comment-15406417 ] 

Jeff Kinnison commented on AIRAVATA-2005:
-----------------------------------------

This appears to be an issue with how experiments are retrieved using Airavata::searchExperiments in ExperimentController::get_expsearch_results_with_pagination.

Airavata::searchExperiments does not seem to filter out experiments that the user does not have Grouper permission to view, so the experiment is displayed on the browse page despite not having permissions.

I've put in a workaround, but an API fix seems like a better long-term solution.

> When a shared user removed from a cloned experiment still experiment appears with the removed user
> --------------------------------------------------------------------------------------------------
>
>                 Key: AIRAVATA-2005
>                 URL: https://issues.apache.org/jira/browse/AIRAVATA-2005
>             Project: Airavata
>          Issue Type: Bug
>          Components: PGA PHP Web Gateway
>    Affects Versions: 0.16
>            Reporter: Eroma
>            Assignee: Jeff Kinnison
>
> Steps taken,
> 1. Create a project shared with user A
> 2. Create an experiment using the above shared project. Since the project is shard, in experiment it is also shared with the user.
> 3. Clone the created experiment and in the cloned experiment remove sharing from user A
> 4. When user A logs in to his account still can view the removed experiment
> 5. When clicked on it givs the exception error page with message 'Undefined variable: users (View: /var/www/portals/dev-seagrid/app/views/partials/experiment-info.blade.php) (View: /var/www/portals/dev-seagrid/app/views/partials/experiment-info.blade.php)'



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)