Data export permissions in ECS
Description
Environment
Potential Workaround
Attachments
Checklist
hideActivity
Ashkhen Gevorgyan September 4, 2024 at 11:53 AM
Hi
The story was verified on https://folio-testing-sprint-cs00000int.ci.folio.org/ environment and works as expected.
Scenario 1:
User has assigned affiliation in central tenant with permissions: “Consortium manager: Can view existing settings” and “Data export: Can view only”
User has assigned affiliation in member1 (college) tenant with permissions: “Data export: Can view only”
User has assigned affiliation in member2 (school) tenant: doesn’t have permission
Scenario 2:
User has assigned affiliation in central tenant with permissions: “Consortium manager: Can view existing settings” and “Data export: Can upload files, export, download files and view logs“
User has assigned affiliation in member1 (college) tenant with permissions: “Data export: Can upload files, export, download files and view logs“
User has assigned affiliation in member2 (school) tenant: doesn’t have permission
Scenario 3:
User has assigned affiliation in central tenant with permissions: “Consortium manager: Can view existing settings” and “Settings (Data export): Can view only”
User has assigned affiliation in member1 (college) tenant with permissions: “Settings (Data export): Can view only”
Scenario 4:
User has assigned affiliation in central tenant with permissions: “Consortium manager: Can view existing settings” and “Settings (Data export): Can view, add, update profiles”
User has assigned affiliation in member1 (college) tenant with permissions: “Settings (Data export): Can view, add, update profiles”
cc:
Tatsiana Hryhoryeva August 15, 2024 at 12:13 PM
Data export permissions on ECS verified in scope of
For Consortium manager the behavior should be adjusted in accordance with current ticket as in existing implementation data export logs are available in Consortium manger with any data export permission
Scenario 1 (works as expected) - User with “Data export: Can view only“, “Consortium manager: Can view existing settings“ permissions
Scenario 2 (works as expected) - User with “Data export: Can upload files, export, download files and view logs“, “Consortium manager: Can view existing settings“ permissions
Scenario 3 (doesn’t work as expected) - User with “Settings (Data export): Can view only“, “Consortium manager: Can view existing settings“ permissions
Scenario 4 (doesn’t work as expected) - User with “Settings (Data export): Can view, add, update profiles“, “Consortium manager: Can view existing settings“ permissions
Details
Details
Assignee
Uladzislau KutarkinReporter
Magda ZacharskaLabels
Priority
P3
Description
Purpose/Overview:
Existing data export permissions are not granular enough and and not provide read only options.
Requirements/Scope:
A member tenant permissions are handled as described in
Central tenant permission for exporting instances and MARC authority records are handled as described in
Central tenant permission for exporting holdings are handled as described in
Consortium manager at the Central tenant is available for users with following permissions:
Permission name
Consortium manager
Data export: Can view only
Visible
Data export: Can upload files, export, download files and view logs
Visible
Settings (Data export): Can view only
Hidden
Settings (Data export): Can view, add, update profiles
Hidden
In Consortium manager user can see the export jobs only for members that the user is affiliated with.
Approach:
Acceptance criteria:
All requirements are met
Unit and e2e tests are updated