topic Re: Why user with ONLY READ permission can remove tags added by another user? in Nuxeo Forum

Why user with ONLY READ permission can remove tags added by another user?

altan_ — Wed, 16 Jul 2014 11:44:11 GMT

User with ONLY READ permission can remove tags added by another user which has all granted permissions. He shouldn't be able to do it. Why is that so?

Re: Why user with ONLY READ permission can remove tags added by another user?

Solen_Guitter — Thu, 24 Jul 2014 11:06:21 GMT

Hi,

This is an implementation choice: we chose to make tags unrestricted which means that users just need Read permission to be able to add or delete tags and tags don't have an author.

This behaviour cannot be changed by XML configuration. It would require some coding / template overriding to make the delete icon (cross) displayed only if the current user has at least Write permission.

Regards,

Solen

Re: Why user with ONLY READ permission can remove tags added by another user?

altan_ — Thu, 24 Jul 2014 19:46:06 GMT

Thank you for your answer!