Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Restrict global admin authorization for annotations #331

Closed
mzur opened this issue Mar 19, 2021 · 1 comment
Closed

Restrict global admin authorization for annotations #331

mzur opened this issue Mar 19, 2021 · 1 comment

Comments

@mzur
Copy link
Member

mzur commented Mar 19, 2021

Global admins are currently authorized to do anything, including changing annotations of any user in any project. Change this so global admins cannot change or delete an annotation or attach or detach a label of an annotation which they don't have the (regular) authorization for. This should prevent accidental data corruption or loss.

@mzur
Copy link
Member Author

mzur commented Mar 19, 2021

I implemented exceptions for the access of Largo and MAIA. Global admins still don't have the permission to save Largo sessions or new MAIA jobs. The exceptions can be removed with biigle/largo#86 and biigle/maia#65.

mzur added a commit to biigle/largo that referenced this issue Mar 19, 2021
mzur added a commit to biigle/maia that referenced this issue Mar 19, 2021
mzur added a commit to biigle/maia that referenced this issue Mar 19, 2021
Admins should still be able to access MAIA jobs.

References biigle/core#331
References #65
@mzur mzur closed this as completed Mar 19, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant