[jira] Commented: (CONTINUUM-1919) 'Project Developer' role has rights to delete project group to which he is assign to.

["Maria Catherine Tan (JIRA)" <ji...@codehaus.org>]

    [ http://jira.codehaus.org/browse/CONTINUUM-1919?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=150268#action_150268 ] 

Maria Catherine Tan commented on CONTINUUM-1919:
------------------------------------------------

There's a bug with this patch.

As a project group administrator: 
I can still delete all project groups.  (Ok)

As a project group developer:  
I can no longer delete a project group.  (OK)

As a project administrator of a certain resource: 
I can no longer delete the project group even if I have a project admin role for that group. (BUG)

As a project developer of a certain resource:
I can no longer delete that group. (OK)

> 'Project Developer' role has rights to delete project group to which he is assign to.
> -------------------------------------------------------------------------------------
>
>                 Key: CONTINUUM-1919
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-1919
>             Project: Continuum
>          Issue Type: Bug
>          Components: Security
>    Affects Versions: 1.2
>            Reporter: Piotr Krzysztoporski
>            Assignee: Maria Catherine Tan
>         Attachments: continuum-1919-continuum-security.patch
>
>
> Developer should be able to delete projects from the group, but not the group itself.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira