<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Fri Feb 09 00:30:16 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[UIU-2410] Issues with a permission set which includes a hidden permission</title>
                <link>https://folio-org.atlassian.net/browse/UIU-2410</link>
                <project id="10131" key="UIU">ui-users</project>
                    <description>&lt;p&gt;&lt;b&gt;Overview:&lt;/b&gt;&lt;br/&gt;
 &lt;b&gt;Steps to Reproduce:&lt;/b&gt;&lt;/p&gt;
&lt;ol&gt;
	&lt;li&gt;Log into Snapshot and/or Cornell FOLIO&lt;/li&gt;
	&lt;li&gt;Open a permission set which includes a hidden permission
	&lt;ol&gt;
		&lt;li&gt;If I edit this permission set, removing a standard &#8220;visible&#8221; permission, the hidden permission remains.&#160; That&#8217;s expected.&lt;/li&gt;
		&lt;li&gt;If I edit the set, ADDing a standard permission, the hidden permission is removed.&#160; That&#8217;s not expected!&lt;/li&gt;
	&lt;/ol&gt;
	&lt;/li&gt;
&lt;/ol&gt;


&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Expected Results:&lt;/b&gt;&#160;&lt;/p&gt;

&lt;p&gt;See above&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Actual Results:&lt;/b&gt;&lt;/p&gt;

&lt;p&gt;See above example&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Additional Information:&lt;/b&gt;&lt;br/&gt;
 URL: &lt;br/&gt;
 &lt;b&gt;Interested parties:&lt;/b&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="43191">UIU-2410</key>
            <summary>Issues with a permission set which includes a hidden permission</summary>
                <type id="10001" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10303?size=medium">Bug</type>
                                            <priority id="10001" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p2.svg">P2</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10000">Won&apos;t Do</resolution>
                                                        <assignee accountid="-1">Unassigned</assignee>
                                                                <reporter accountid="557058:1f093336-57f7-4359-9b28-6e72640645af">Debra Howell</reporter>
                                    <labels>
                            <label>Support</label>
                    </labels>
                <created>Thu, 12 Aug 2021 19:35:48 +0000</created>
                <updated>Wed, 6 Dec 2023 22:52:33 +0000</updated>
                            <resolved>Wed, 1 Sep 2021 21:02:07 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>5</watches>
                                                                <comments>
                                                            <comment id="92690" author="5d6eeadef989e00d8c7e897b" created="Mon, 16 Aug 2021 14:13:00 +0000"  >&lt;p&gt;Support - we think that &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt;&#160;needs to look into this.&#160;&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;IT should be possible to inform users that there are hidden permissions - that will be lost if the set or the users are changed...&#160;&lt;/p&gt;

&lt;p&gt;&#160;&lt;/p&gt;

&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1f093336-57f7-4359-9b28-6e72640645af&quot; class=&quot;user-hover&quot; rel=&quot;557058:1f093336-57f7-4359-9b28-6e72640645af&quot; data-account-id=&quot;557058:1f093336-57f7-4359-9b28-6e72640645af&quot; accountid=&quot;557058:1f093336-57f7-4359-9b28-6e72640645af&quot; rel=&quot;noreferrer&quot;&gt;Debra Howell&lt;/a&gt;&#160;and &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt;&#160;will work on this to flush out steps to recreate&#160;&lt;/p&gt;</comment>
                                                            <comment id="92694" author="615afd1cd9820f0070a09ef0" created="Mon, 30 Aug 2021 20:42:29 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A1f093336-57f7-4359-9b28-6e72640645af&quot; class=&quot;user-hover&quot; rel=&quot;557058:1f093336-57f7-4359-9b28-6e72640645af&quot; data-account-id=&quot;557058:1f093336-57f7-4359-9b28-6e72640645af&quot; accountid=&quot;557058:1f093336-57f7-4359-9b28-6e72640645af&quot; rel=&quot;noreferrer&quot;&gt;Debra Howell&lt;/a&gt;, &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=557058%3A5d614fdb-3e99-4d60-9dd5-d6ca489d22a4&quot; class=&quot;user-hover&quot; rel=&quot;557058:5d614fdb-3e99-4d60-9dd5-d6ca489d22a4&quot; data-account-id=&quot;557058:5d614fdb-3e99-4d60-9dd5-d6ca489d22a4&quot; accountid=&quot;557058:5d614fdb-3e99-4d60-9dd5-d6ca489d22a4&quot; rel=&quot;noreferrer&quot;&gt;Amy Blumenthal&lt;/a&gt;: The real problem here is that &lt;em&gt;hidden permissions should never be part of a permission set&lt;/em&gt; and as such it&apos;s very tempting to close this as &quot;Won&apos;t fix&quot;. In other words, this ticket describes a symptom, but it is not the actual problem. If such permission are necessary to accomplish a task, that is an indication of a misconfigured pset elsewhere (&lt;a href=&quot;https://folio-project.slack.com/archives/C210RP0T1/p1602005755141400?thread_ts=1602002997.121800&amp;amp;cid=C210RP0T1&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;as noted on Slack&lt;/a&gt;, &lt;a href=&quot;https://folio-project.slack.com/archives/C1EPYQKCL/p1623943035116700?thread_ts=1623941199.113800&amp;amp;cid=C1EPYQKCL&quot; class=&quot;external-link&quot; rel=&quot;nofollow noreferrer&quot;&gt;multiple times&lt;/a&gt;), probably in a ui-app&apos;s &lt;tt&gt;package.json&lt;/tt&gt; file, and we should file bugs accordingly.&lt;/p&gt;

&lt;p&gt;For the record, here&apos;s an explanation of the current form behavior. Given a permission-set composed of the visible permissions A, B, and C, as well as the hidden permissions X, Y, and Z, the full list looks like &lt;tt&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;A, B, C, X, Y, Z&amp;#93;&lt;/span&gt;&lt;/tt&gt;. When editing a pset, only A, B, and C will be visible in the accordion, but the form&apos;s cache contains the full list &lt;tt&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;A, B, C, X, Y, Z&amp;#93;&lt;/span&gt;&lt;/tt&gt;. &lt;/p&gt;

&lt;p&gt;Clicking the X to remove a permission removes it from the form&apos;s cache, so removing A results in &lt;tt&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;B, C, X, Y, Z&amp;#93;&lt;/span&gt;&lt;/tt&gt;. &lt;/p&gt;

&lt;p&gt;Clicking the &quot;Add permission&quot; button opens the &quot;Select permissions&quot; modal, which receives a list of all &lt;em&gt;visible&lt;/em&gt; permissions, plus the currently-assigned permissions from the cache. Adding F and removing A in the dialog adds and removes them from its list of assigned permissions. Clicking the dialog&apos;s &quot;Save and close&quot; button calls a function that takes the intersection of visible permissions and assigned permissions, resulting in a list like &lt;tt&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;B, C, F&amp;#93;&lt;/span&gt;&lt;/tt&gt;, i.e. all hidden permissions are removed. We could pass the modal a list of all permissions, instead of only the visible permissions, but then these extremely granular permissions which are not supposed to be user-assignable would become user-assignable. &lt;/p&gt;

&lt;p&gt;I will grant, however, that this is a lousy user experience. If we leave the dialog as-is, receiving only visible permissions, we could provide an alert/warning/&lt;em&gt;something&lt;/em&gt; when saving the changes would remove hidden permissions. I filed 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;UIU-2409&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-2409&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;warn when changing permissions will remove hidden permissions&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-2409
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 for that feature but have not assigned it a priority. &lt;/p&gt;</comment>
                                                            <comment id="92700" author="557058:5d614fdb-3e99-4d60-9dd5-d6ca489d22a4" created="Tue, 31 Aug 2021 00:56:54 +0000"  >&lt;p&gt;Zak, thank you for your reply and explanation of why things work the way they do.&#160;&#160;&lt;/p&gt;

&lt;p&gt;It would be very helpful to have an alert when saving the changes would remove hidden permissions.&#160; This will be especially important when more staff here participate in the creation and editing of permission sets.&#160; I&apos;m writing up documentation, but not everyone is going to remember this &quot;gotcha&quot; of permissions being removed.&#160; And with longer permission sets it may not even be noticed - until a department reports that a key feature they need isn&apos;t working anymore.&lt;/p&gt;

&lt;p&gt;And to be clear - we are submitting bug reports or enhancement requests when we run into a situation where a hidden permission fills a gap.&lt;/p&gt;

&lt;p&gt;Thank you for filing 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;UIU-2409&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-2409&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;warn when changing permissions will remove hidden permissions&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-2409
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
 - I&apos;ll keep an eye on that!&lt;/p&gt;</comment>
                                                            <comment id="92703" author="557058:1f093336-57f7-4359-9b28-6e72640645af" created="Tue, 31 Aug 2021 11:57:35 +0000"  >&lt;p&gt;&lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=615afd1cd9820f0070a09ef0&quot; class=&quot;user-hover&quot; rel=&quot;615afd1cd9820f0070a09ef0&quot; data-account-id=&quot;615afd1cd9820f0070a09ef0&quot; accountid=&quot;615afd1cd9820f0070a09ef0&quot; rel=&quot;noreferrer&quot;&gt;Zak Burke&lt;/a&gt;&#160;I appreciate the thoughtful investigation and education on how this works! It is ok with me if this is Closed as &quot;Will Not Do&quot; now. Thanks!&lt;/p&gt;</comment>
                                                            <comment id="92706" author="615afd1cd9820f0070a09ef0" created="Wed, 1 Sep 2021 21:02:07 +0000"  >&lt;p&gt;Replaced by 
    &lt;span class=&quot;jira-issue-macro resolved&quot; data-jira-key=&quot;UIU-2409&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-2409&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;warn when changing permissions will remove hidden permissions&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-2409
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-success jira-macro-single-issue-export-pdf&quot;&gt;Closed&lt;/span&gt;
            &lt;/span&gt;
&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                                                <inwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="43449">UIU-2409</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                        <customfield id="customfield_10107" key="com.atlassian.jira.plugin.system.customfieldtypes:multiselect">
                        <customfieldname>Affected Institution</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10394"><![CDATA[Cornell]]></customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10057" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Development Team</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10171"><![CDATA[Prokopovych]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10063" key="com.atlassian.jira.plugin.system.customfieldtypes:float">
                        <customfieldname>PO Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10045" key="com.atlassian.jira.plugin.system.customfieldtypes:textarea">
                        <customfieldname>Potential Workaround</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>In order to add a standard permission without losing the hidden permission, I need to first go to Settings/Developer/Configuration and put a checkmark for List &#8220;invisible&#8221; permissions in add-perm menus.</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|i036kv:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue id="1532">Prokopovych - Sprint 122</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Mon, 16 Aug 2021 14:13:00 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>