ckanext-privatedatasets
ckanext-privatedatasets copied to clipboard
Editing Permissions on User-Level only instead of Organization
Displaying the "Owner" badge, as well as the list of "Allowed Users" is possible only for the initial creator of the dataset. However, as CKAN allows to have organization-level permissions, the plugin should check permissions not on the individual level only, but on the level of dataset editing permissions. As a result, other users that are able to manage the dataset due to the organization level permissions don't see the allowed users but an empty field and thus cannot remove users from the list.
Example: User A and B editor in Organization O1. Dataset D1 created by A in O1. D1 allowed for User C by using the plugin.
D1 can be edited by B, but the allowed users list is empty.
CKAN-Version: 2.8.2 Plugin-Version: 520da26
I have also encountered this issue. If the task is not to remove a user from the allowed list, but simply to edit the metadata, then the list could also unknowingly be erased upon saving the edits.