Children and Member tabs show up regardless of edit permission #109
Labels
access controls
bug
Something isn't working
nice-to-have-for-launch
wontfix
This will not be worked on
In fixing #35, it sort of creates another issue, because of #107.
The "Children" and "Media" tabs each have a button ("Add child", "Add media") to add new nodes or media. The buttons show up regardless of whether or not a user has permission to add Media or Children to that collection. The logic for these tabs is in Islandora module and we may want to override how they work, so they don't show up if the user doesn't have edit access to the parent object.
Because of #107, it makes it easier for a user who shouldn't be able to to add children to a collection. (The access terms field works just fine, btw, as it filters out options the user doesn't have access to. In other words, the user cannot give the new node any access terms they do not have access to).
The text was updated successfully, but these errors were encountered: