Non-admin users cannot create/delete/change ACLs in the event details view

Steps to reproduce

Steps to reproduce:
1. Create a non-admin user and assign all UI roles to the user
2. Login as the user and create an event with the following ACL:
ROLE_USER_TEST read/write

Actual Results:
When opening event-details of the event in the Access-Tab, the user cannot create or delete ACL entries. It is also impossible to change the role of an ACL entry, The respective UI elements are missing or greyed out (see screen1.png). This happens whether the event is assigned to a series or not.

Expected Results:
The user can create/delete/change ACL entries provided they have write access to the event.

Workaround (if any):
Assigning ROLE_ADMIN to the user (not really an option in most cases)

Activity

Show:
Katrin Scharnowski
August 25, 2017, 2:09 PM

Hi Sven,

here is the output of the info/me.json from the admin node:

{
"org": {
"anonymousRole": "ROLE_ANONYMOUS",
"name": "Opencast Project",
"adminRole": "ROLE_ADMIN",
"id": "mh_default_org",
"properties": {
"admin.shortcut.general.series_view": "s",
"org.opencastproject.admin.ui.url": "https://{ADMIN-URL}",
"admin.shortcut.editor.split_at_current_time": "v",
"player.shortcut.controls.nextChapter": "pageup",
"engageui.annotations.enable": "true",
"admin.shortcut.player.mute": "m",
"admin.shortcut.general.select_previous_dashboard_filter": "F",
"player.shortcut.controls.jumpToBegin": "backspace",
"admin.shortcut.editor.play_ending_of_current_segment": "n",
"player.mastervideotype": "presenter/delivery",
"player.shortcut.layout.focusPrev": "<",
"org.opencastproject.admin.help.documentation.url": "http://docs.opencast.org",
"player.shortcut.controls.prevChapter": "pagedown",
"player.positioncontrols": "bottom",
"player.shortcut.zoom.moveLeft": "a",
"admin.shortcut.general.event_view": "e",
"admin.shortcut.editor.clear_list": "ctrl+backspace",
"adminui.user.external_role_display": "false",
"admin.shortcut.general.help": "?",
"logo_mediamodule": "/engage/ui/img/logo/opencast-icon.svg",
"org.opencastproject.admin.help.restdocs.url": "/rest_docs.html",
"admin.shortcut.general.new_series": "N",
"engageui.link_mobile_redirect.description": "For more information have a look at the official site.",
"player.shortcut.zoom.moveRight": "d",
"player.shortcut.layout.movePiP": "p",
"player.hide_video_context_menu": "false",
"player.shortcut.playbackrate.decrease": "T",
"admin.shortcut.general.select_next_dashboard_filter": "f",
"player.shortcut.zoom.in": "+",
"admin.shortcut.player.next_segment": "down",
"admin.shortcut.general.new_event": "n",
"player.shortcut.controls.playPause": "space",
"admin.shortcut.player.next_frame": "right",
"player.shortcut.fullscreen.cancel": "escape",
"player.focusedflavor": "presentation",
"org.opencastproject.admin.mediamodule.url": "https://{PRESENTATION-URL}/engage/ui",
"player.allowedtags": "engage-download,engage-streaming",
"player.shortcut.zoom.moveUp": "w",
"player.shortcut.zoom.out": "-",
"player.shortcut.layout.focusNext": ">",
"player.shortcut-sequence": "controls,volume,playbackrate,layout,zoom,fullscreen",
"player.shortcut.controls.seekLeft": "left",
"player.shortcut.playbackrate.increase": "t",
"admin.shortcut.editor.play_current_segment_with_pre-roll": "C",
"org.opencastproject.engage.ui.url": "https://{PRESENTATION-URL}",
"player.shortcut.volume.up": "9",
"adminui.chunksize": "2048",
"admin.shortcut.editor.cut_selected_segment": "backspace",
"admin.shortcut.player.step_backward": "ctrl+left",
"player.shortcut.controls.seekRight": "right",
"admin.shortcut.editor.play_current_segment": "c",
"logo_player": "/engage/theodul/ui/img/opencast.svg",
"admin.shortcut.general.remove_filters": "r",
"player": "/engage/theodul/ui/core.html",
"player.shortcut.volume.down": "8",
"admin.shortcut.general.main_menu": "m",
"engageui.link_download.enable": "false",
"engageui.links_media_module.enable": "true",
"engageui.link_mobile_redirect.enable": "false",
"login.display_defaults": "true",
"show_embed_links": "true",
"admin.shortcut.player.volume_up": "+",
"player.layout": "off",
"link_mediamodule": "true",
"player.shortcut.fullscreen.enable": "mod+enter",
"admin.shortcut.player.previous_frame": "left",
"admin.shortcut.player.play_pause": "space",
"player.shortcut.volume.muteToggle": "m",
"admin.shortcut.player.volume_down": "-",
"admin.shortcut.player.previous_segment": "up",
"engageui.link_mobile_redirect.url": "http://opencast.org/",
"admin.shortcut.player.step_forward": "ctrl+right",
"org.opencastproject.oaipmh.server.hosturl": "https://{PRESENTATION-URL},
"player.shortcut.layout.togglePiP": "o",
"player.shortcut.zoom.moveDown": "s"
}
},
"roles": [
"ROLE_UI_SERVICES_STATUS_EDIT",
"ROLE_UI_EVENTS_DETAILS_COMMENTS_CREATE",
"ROLE_UI_EVENTS_DETAILS_MEDIA_VIEW",
"ROLE_UI_SERIES_DETAILS_ACL_VIEW",
"ROLE_UI_EVENTS_DETAILS_METADATA_EDIT",
"ROLE_UI_EVENTS_EDITOR_VIEW",
"ROLE_UI_TASKS_CREATE",
"ROLE_UI_SERIES_DETAILS_METADATA_EDIT",
"ROLE_UI_NAV_CONFIGURATION_VIEW",
"ROLE_UI_EVENTS_COUNTERS_VIEW",
"ROLE_UI_EVENTS_DELETE",
"ROLE_ADMIN_UI",
"ROLE_UI_SERVERS_DETAILS_VIEW",
"ROLE_UI_ACLS_CREATE",
"ROLE_UI_EVENTS_CREATE",
"ROLE_UI_EVENTS_DETAILS_ACL_VIEW",
"ROLE_UI_EVENTS_DETAILS_COMMENTS_EDIT",
"ROLE_UI_EVENTS_DETAILS_ATTACHMENTS_VIEW",
"ROLE_UI_SERIES_DETAILS_THEMES_EDIT",
"ROLE_UI_SERIES_DETAILS_METADATA_VIEW",
"ROLE_UI_GROUPS_VIEW",
"ROLE_UI_NAV",
"ROLE_UI_EVENTS_DETAILS_ACL_EDIT",
"ROLE_UI_EVENTS_DETAILS_COMMENTS_VIEW",
"ROLE_UI_JOBS_VIEW",
"ROLE_UI_SERIES_DETAILS_THEMES_VIEW",
"ROLE_UI_EVENTS_DETAILS_COMMENTS_DELETE",
"ROLE_UI_SERIES_DETAILS_ACL_EDIT",
"ROLE_UI_EVENTS_DETAILS_VIEW",
"ROLE_UI_NAV_CAPTURE_VIEW",
"ROLE_UI_GROUPS_EDIT",
"ROLE_UI_LOCATIONS_DETAILS_VIEW",
"ROLE_UI_USERS_DELETE",
"ROLE_UI_THEMES_DETAILS_VIEW",
"ROLE_UI_SERIES_VIEW",
"ROLE_UI_GROUPS_CREATE",
"ROLE_UI_LOCATIONS_VIEW",
"ROLE_UI_NAV_RECORDINGS_VIEW",
"ROLE_UI_EVENTS_DETAILS_WORKFLOWS_VIEW",
"ROLE_ANONYMOUS",
"ROLE_UI_GROUPS_DELETE",
"ROLE_UI_EVENTS_DETAILS_COMMENTS_RESOLVE",
"ROLE_UI_SERVERS_MAINTENANCE_EDIT",
"ROLE_USER_TEST",
"ROLE_UI_EVENTS_VIEW",
"ROLE_UI_NAV_SYSTEMS_VIEW",
"ROLE_UI_EVENTS_DETAILS_WORKFLOWS_EDIT",
"ROLE_UI_ACLS_DELETE",
"ROLE_UI_NAV_ORGANIZATION_VIEW",
"ROLE_UI_SERIES_CREATE",
"ROLE_UI_THEMES_DELETE",
"ROLE_UI_EVENTS_EDITOR_EDIT",
"ROLE_UI_SERVICES_VIEW",
"ROLE_UI_ACLS_VIEW",
"ROLE_UI_EVENTS_DETAILS_GENERAL_VIEW",
"ROLE_UI_THEMES_VIEW",
"ROLE_UI_EVENTS_DETAILS_ASSETS_VIEW",
"ROLE_UI_EVENTS_DETAILS_METADATA_VIEW",
"ROLE_UI_USERS_CREATE",
"ROLE_UI_SERIES_DELETE",
"ROLE_UI_SERVERS_VIEW",
"ROLE_UI_THEMES_CREATE",
"ROLE_UI_ACLS_EDIT",
"ROLE_UI_THEMES_EDIT",
"ROLE_UI_USERS_VIEW",
"ROLE_UI_USERS_EDIT",
"ROLE_USER",
"ROLE_UI_SERIES_DETAILS_VIEW",
"ROLE_UI_EVENTS_DETAILS_COMMENTS_REPLY"
],
"userRole": "ROLE_USER_TEST",
"user": {
"provider": "opencast",
"name": "test",
"email": "test@test",
"username": "test"
}
}

The UI-ACLS roles are definitely there.

Best,
Katrin

Sven Stauber
August 25, 2017, 1:55 PM
Edited

Hi Katrin,

Can you please post the output of https://\<your admin node>/info.me.json when logged in as a user where the described problem occurs here?

The screenshot looks like that user misses the roles ROLE_UI_ACLS_EDIT, ROLE_UI_ACLS_CREATE and ROLE_UI_ACLS_DELETE.

Best,
Sven

Assignee

Unassigned

Reporter

Katrin Scharnowski

Severity

Incorrectly Functioning With Workaround