[GeoNetwork-devel] [GeoNetwork opensource Developer website] #979: Privileges / Editor could create metadata in groups there are not member of

GeoNetwork GeoNetwork Developer
1

#979: Privileges / Editor could create metadata in groups there are not member of
---------------------+------------------------------------------------------
Reporter: fxp | Owner: geonetwork-devel@…
     Type: defect | Status: new
Priority: major | Milestone: v2.9.0
Component: General | Version:
Keywords: |
---------------------+------------------------------------------------------
Using the metadata.create service, user could create new record in all
groups (even if the user is not a member).
{{{
http://localhost:8080/geonetwork/srv/eng/metadata.create.new?id=13&group=51&currTab=simple
}}}
The GUI only display user groups, so that should not happen.

Add a !ServiceNotAllowedEx exception in that case.

--
Ticket URL: <http://trac.osgeo.org/geonetwork/ticket/979&gt;
GeoNetwork opensource Developer website <http://sourceforge.net/projects/geonetwork/&gt;
GeoNetwork opensource is a standards based, Free and Open Source catalog application to manage spatially referenced resources through the web. It provides powerful metadata editing and search functions as well as an embedded interactive web map viewer. This website contains information related to the development of the software.

2

#979: Privileges / Editor could create metadata in groups there are not member of
---------------------+------------------------------------------------------
Reporter: fxp | Owner: geonetwork-devel@…
     Type: defect | Status: new
Priority: major | Milestone: v2.9.0
Component: General | Version:
Keywords: |
---------------------+------------------------------------------------------

Comment(by fxp):

Editor can also publish in "reserved" group (ie. internet, intranet,
guest) using the metadata.admin service and _0_0=on to publish to intranet
for example.

Add a !ServiceNotAllowedEx exception in that case.

--
Ticket URL: <http://trac.osgeo.org/geonetwork/ticket/979#comment:1&gt;
GeoNetwork opensource Developer website <http://sourceforge.net/projects/geonetwork/&gt;
GeoNetwork opensource is a standards based, Free and Open Source catalog application to manage spatially referenced resources through the web. It provides powerful metadata editing and search functions as well as an embedded interactive web map viewer. This website contains information related to the development of the software.