DO NOT REPLY - tab.acAuthoring throws exception and corrupts ac data

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=40
609>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=40609


nettingsapache.org changed:

           What    |Removed                     |Added
------------------------------------------------------------
----------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |




------- Additional Comments From nettingsapache.org  2006-09-27 11:43 -------
again:

log in as user lenya.
go to site overview, select page "document type
examples".
open "ac authoring" tab.
as an inheritable credential, add { group:edit, role:edit,
deny}.
press "add".
as an inheritable credential, add { group:admin, role:edit:
grant}.
press "add". pooof.


the problems are these:


the usecase permissions for tab.acLive are
"admin/grant".
lenya (as an admin) should be able to commit the second
change, even
after taking away the edit permission for one of its own
group
accreditables, as changing ac calls for the
"admin" role (which was
never touched). that seems like a big bug.

the user does not get a meaningful error message, and lenya
throws an
exception. that is perhaps a small bug, but it needs to be
fixed.

after the entire transaction (which only touched the *edit*
role), user
lenya can no longer *view* the page. "world"
should still be able to
view the page, and lenya is "world". plus the
*view* role was never
touched as well in the entire test case. that looks like
another mother
of a bug.

and even if this all is due to some misconception of mine
(which might
well be the case), it would be a lot more polite to point
out my errors
in understanding and give me a chance to close the bug than
marking it
as invalid without giving it more that a passing glance. i
may be alone
in this, but for me, ac is serious stuff. if i'm totally not
grokking
it, that's at least a serious documentation issue.


-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=ema
il
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the
assignee.

------------------------------------------------------------
---------
To unsubscribe, e-mail: dev-unsubscribelenya.apache.org
For additional commands, e-mail: dev-helplenya.apache.org