<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#ffffff" text="#4c4c4c" link="#007aa6" vlink="#007aa6" style="text-align:left; direction:ltr;">
<div>Hi all,</div>
<div><br>
</div>
<div>Looking at this a little bit more, it seems to be the case that the "update_location_record" permission is given globally whilst the "manage_repository" permission is set at repository level. This means that if a user has managerial level permissions at
repository A but only very basic level permissions at repository B, they are still able to create, amend and delete locations at both A and B.</div>
<div><br>
</div>
<div>Is there any reason that "update_location_record" isn't a repository level permission? We will have quite a number of repositories and a fair few staff members who will be given different permission levels in more than one of them. It just seems bizarre
that someone who is merely in the "repository-viewers" group at a repository should be allowed to delete said repository's locations, purely because another repository has put them in the "repository-managers" group.</div>
<div><br>
</div>
<div>Best wishes,</div>
<div>Nick</div>
<div><br>
</div>
<div>-----Original Message-----</div>
<div><b>From</b>: Nick Butler <<a href="mailto:Nick%20Butler%20%3cnpwb2@cam.ac.uk%3e">npwb2@cam.ac.uk</a>></div>
<div><b>Reply-To</b>: Archivesspace Users Group <<a href="mailto:Archivesspace%20Users%20Group%20%3carchivesspace_users_group@lyralists.lyrasis.org%3e">archivesspace_users_group@lyralists.lyrasis.org</a>></div>
<div><b>To</b>: archivesspace_users_group@lyralists.lyrasis.org <<a href="mailto:%22archivesspace_users_group@lyralists.lyrasis.org%22%20%3carchivesspace_users_group@lyralists.lyrasis.org%3e">archivesspace_users_group@lyralists.lyrasis.org</a>></div>
<div><b>Subject</b>: Re: [Archivesspace_Users_Group] Creating location records - how?</div>
<div><b>Date</b>: Thu, 10 Oct 2019 15:06:43 +0000</div>
<div><br>
</div>
<!-- text/html -->
<div>Hi Trevor,</div>
<div><br>
</div>
<div>Thank you very much for your speedy and helpful response - giving the user the manage_repository permission did indeed fix the issue. I don't think I'd have found that file otherwise, and it looks like a useful point of reference.</div>
<div><br>
</div>
<div>Many thanks,</div>
<div>Nick</div>
<div><br>
</div>
<div>-----Original Message-----</div>
<div><b>From</b>: Trevor Thornton <<a href="mailto:Trevor%20Thornton%20%3ctrthorn2@ncsu.edu%3e">trthorn2@ncsu.edu</a>></div>
<div><b>Reply-To</b>: Archivesspace Users Group <<a href="mailto:Archivesspace%20Users%20Group%20%3carchivesspace_users_group@lyralists.lyrasis.org%3e">archivesspace_users_group@lyralists.lyrasis.org</a>></div>
<div><b>To</b>: Archivesspace Users Group <<a href="mailto:Archivesspace%20Users%20Group%20%3carchivesspace_users_group@lyralists.lyrasis.org%3e">archivesspace_users_group@lyralists.lyrasis.org</a>></div>
<div><b>Subject</b>: Re: [Archivesspace_Users_Group] Creating location records - how?</div>
<div><b>Date</b>: Thu, 10 Oct 2019 11:01:19 -0400</div>
<div><br>
</div>
<!-- text/html -->
<div dir="ltr">We just ran into this issue last week. From what I can tell, the permission to update location records is tied to the permission to manage the repository ("manage this repository (change groups and other settings)"). I couldn't find any documentation
to back this up but found this setting in the code:
<div><br>
</div>
<div><a href="https://github.com/archivesspace/archivesspace/blob/8ffdb952cce8c8804392c229772ae68a00065bcc/backend/app/lib/bootstrap_access_control.rb#L209-L212">https://github.com/archivesspace/archivesspace/blob/8ffdb952cce8c8804392c229772ae68a00065bcc/backend/app/lib/bootstrap_access_control.rb#L209-L212</a><br>
</div>
</div>
<br>
<div class="gmail_quote">
<div dir="ltr" class="gmail_attr">On Thu, Oct 10, 2019 at 10:51 AM Nick Butler <<a href="mailto:npwb2@cam.ac.uk">npwb2@cam.ac.uk</a>> wrote:<br>
</div>
<blockquote type="cite" style="margin:0 0 0 .8ex; border-left:2px #729fcf solid;padding-left:1ex">
<div style="text-align:left;direction:ltr" bgcolor="#ffffff">
<div>Hi all,</div>
<div><br>
</div>
<div>We're currently running v2.5.2 on our development system (we aren't live yet) and we're running into a peculiar problem with the permission "update_location_record".</div>
<div><br>
</div>
<div>As far as we can tell, two users have been set up with the same level of permissions yet only one can create and edit location records. Pulling their records via the [:GET] /users/:id API endpoint shows that one has the "update_location_record" for all
their repositories and also for the "_archivesspace" global repository, yet the other doesn't have this permission anywhere. The full list of permissions acquired via the [:GET] /<span>permission</span>s endpoint doesn't even include this permission; nor does
the permission table of our underlying database. I tried adding it to the other user's record by POSTing a modified user object to the [:POST] /users/:id endpoint but this seems to have had no effect.</div>
<div><br>
</div>
<div>Basically, how does one go about getting this permission? And is there a reason it doesn't show up in either the database or [:GET] /<span>permission</span>s? Could this be something that's resolved by upgrading from v2.5.2? Any advice would be very welcome,
as this will become quite a pressing issue for us soon.</div>
<div><br>
</div>
<div>Many thanks,</div>
<div>Nick</div>
<div><span>
<pre>-- <br></pre>
<div>
<div>
<div><i><font color="#000080" size="4">Nick Butler</font></i></div>
<div><i><font color="#000080" size="4">Software Developer</font></i></div>
<div><i><font color="#000080" size="4">Digital Services</font></i></div>
<div><i><font color="#000080" size="4">Cambridge University Library</font></i></div>
<div><i><font color="#000080" size="4">West Road</font></i></div>
<div><i><font color="#000080" size="4">Cambridge CB3 9DR, UK</font></i></div>
<div><i><font color="#000080" size="4"><br>
</font></i></div>
<div><a href="mailto:npwb2@cam.ac.uk" target="_blank"><i><font color="#000080" size="4">npwb2@cam.ac.uk</font></i></a></div>
<div></div>
</div>
<pre><pre></pre><pre></pre></pre>
<pre><i><font face="monospace" color="#000080" size="4"></font></i></pre>
<pre><i><div><i style="font-family:Ubuntu;font-size:14.6667px"><font color="#000080" size="4">Internal tel: 33067</font></i></div></i></pre>
</div>
<div></div>
<div></div>
</span></div>
</div>
_______________________________________________<br>
Archivesspace_Users_Group mailing list<br>
<a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org" target="_blank">Archivesspace_Users_Group@lyralists.lyrasis.org</a><br>
<a href="http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group" rel="noreferrer" target="_blank">http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group</a><br>
</blockquote>
</div>
<br clear="all">
<div><br>
</div>
<pre>_______________________________________________</pre>
<pre>Archivesspace_Users_Group mailing list</pre>
<pre><a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org">Archivesspace_Users_Group@lyralists.lyrasis.org</a></pre>
<pre><a href="http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group">http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group</a></pre>
<pre><br></pre>
<div><span>
<pre>-- <br></pre>
<div>
<div>
<div><i><font color="#000080" size="4">Nick Butler</font></i></div>
<div><i><font color="#000080" size="4">Software Developer</font></i></div>
<div><i><font color="#000080" size="4">Digital Services</font></i></div>
<div><i><font color="#000080" size="4">Cambridge University Library</font></i></div>
<div><i><font color="#000080" size="4">West Road</font></i></div>
<div><i><font color="#000080" size="4">Cambridge CB3 9DR, UK</font></i></div>
<div><i><font color="#000080" size="4"><br>
</font></i></div>
<div><a href="mailto:npwb2@cam.ac.uk"><i><font color="#000080" size="4">npwb2@cam.ac.uk</font></i></a></div>
<div></div>
</div>
<pre><pre></pre><pre></pre></pre>
<pre><i><font face="monospace" color="#000080" size="4"></font></i></pre>
<pre><i><div><i style="font-family: Ubuntu; font-size: 14.666666984558105px;"><font color="#000080" size="4">Internal tel: 33067</font></i></div></i></pre>
</div>
<div></div>
<div></div>
</span></div>
<pre>_______________________________________________</pre>
<pre>Archivesspace_Users_Group mailing list</pre>
<pre><a href="mailto:Archivesspace_Users_Group@lyralists.lyrasis.org">Archivesspace_Users_Group@lyralists.lyrasis.org</a></pre>
<pre><a href="http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group">http://lyralists.lyrasis.org/mailman/listinfo/archivesspace_users_group</a></pre>
<pre><br></pre>
<div><span>
<pre>-- <br></pre>
<div>
<div>
<div><i><font color="#000080" size="4">Nick Butler</font></i></div>
<div><i><font color="#000080" size="4">Software Developer</font></i></div>
<div><i><font color="#000080" size="4">Digital Services</font></i></div>
<div><i><font color="#000080" size="4">Cambridge University Library</font></i></div>
<div><i><font color="#000080" size="4">West Road</font></i></div>
<div><i><font color="#000080" size="4">Cambridge CB3 9DR, UK</font></i></div>
<div><i><font color="#000080" size="4"><br>
</font></i></div>
<div><a href="mailto:npwb2@cam.ac.uk"><i><font color="#000080" size="4">npwb2@cam.ac.uk</font></i></a></div>
<div></div>
</div>
<pre><pre></pre><pre></pre></pre>
<pre><i><font face="monospace" color="#000080" size="4"></font></i></pre>
<pre><i><div><i style="font-family: Ubuntu; font-size: 14.666666984558105px;"><font color="#000080" size="4">Internal tel: 33067</font></i></div></i></pre>
</div>
<div></div>
<div></div>
</span></div>
</body>
</html>