Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-41718

Delegated Access > more configuration options to enable or disable settings

    XMLWordPrintable

    Details

    • Type: Feature Request
    • Status: RESOLVED
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 20.0 [Tentative]
    • Fix Version/s: 20.0 [Tentative]
    • Component/s: DelegatedAccess
    • Labels:
      None
    • Property addition/change required:
      Yes
    • Test Plan:
      Hide
      1. On a server with default Delegated Access sakai.properties (nightly master, nightly 19.x, QA, etc.), ensure nothing has changed:
        1. As admin, use the search by user functionality to edit access for any user in the system
        2. Verify the admin user can still see and interact with all functionalities (restricted tools, shopping admin, become user)
        3. Assign any user some delegated access (give them all the things)
        4. Use the admin DA tool to push the DA tool to DA'd users' Home sites
        5. Log in as the user you granted DA to in the previous step
        6. Using the DA tool, verify they can see and interact with all functionalities (use the user search tool)

      The remaining steps must be performed on a server with the following sakai.properties set:

      • delegatedaccess.toolslist.UI.enabled=false
      • delegatedaccess.shopping.UI.enabled=false
      • delegatedaccess.allow.accessadmin.set.allowBecomeUser=false
      1. As admin, use the search by user functionality to edit access for any user in the system
      2. Verify the admin can still see and interact with the "restricted tools" option
      3. Verify the admin cannot see or interact with the "shopping admin" option
      4. Assign any user some delegated access (give them all the things available)
      5. Use the admin DA tool to push the DA tool to DA'd users' Home sites
      6. Log in as the user you granted DA to in the previous step
      7. Using the DA tool, verify they cannot see or interact with the "restricted tools", "shopping admin", or "become user" options
      8. Verify the instruction text produced when clicking the icon does not make mention of any of the settings the user cannot see or interact with
      Show
      On a server with default Delegated Access sakai.properties (nightly master, nightly 19.x, QA, etc.), ensure nothing has changed: As admin, use the search by user functionality to edit access for any user in the system Verify the admin user can still see and interact with all functionalities (restricted tools, shopping admin, become user) Assign any user some delegated access (give them all the things) Use the admin DA tool to push the DA tool to DA'd users' Home sites Log in as the user you granted DA to in the previous step Using the DA tool, verify they can see and interact with all functionalities (use the user search tool) The remaining steps must be performed on a server with the following sakai.properties set: delegatedaccess.toolslist.UI.enabled=false delegatedaccess.shopping.UI.enabled=false delegatedaccess.allow.accessadmin.set.allowBecomeUser=false As admin, use the search by user functionality to edit access for any user in the system Verify the admin can still see and interact with the "restricted tools" option Verify the admin cannot see or interact with the "shopping admin" option Assign any user some delegated access (give them all the things available) Use the admin DA tool to push the DA tool to DA'd users' Home sites Log in as the user you granted DA to in the previous step Using the DA tool, verify they cannot see or interact with the "restricted tools", "shopping admin", or "become user" options Verify the instruction text produced when clicking the icon does not make mention of any of the settings the user cannot see or interact with

      Description

      The linked PR proposes the implementation of the following configuration options:

      1. New sakai.property to control the visibility of the "Restricted Tools" column for non-admin users (delegatedaccess.toolslist.UI.enabled, which defaults to true to preserve original functionality
      2. New sakai.property to control the visibility of the "Shopping Admin" column for all users (delegatedaccess.shopping.UI.enabled, which defaults to true to preserve original functionality
      3. Break up and conditionally render the individual portions of the instructional text when clicking the icon in the "Edit Permission for <user>" interface, based on the appropriate logic
      4. Ensure the "Become User" option in the "Advanced" options UI is obeying the existing logic (allowAccessAdminsSetBecomeUserPerm())
        • This implies that in order for this setting to be hidden from non-admin users, the existing property delegatedaccess.allow.accessadmin.set.allowBecomeUser must also be to false

      Refer to the screenshots which illustrate which columns/settings are affected by the proposed changes.

        Gliffy Diagrams

          Attachments

            Activity

              People

              • Assignee:
                bjones86 Brian Jones
                Reporter:
                bjones86 Brian Jones
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Git Source Code