Uploaded image for project: 'DSpace'
  1. DSpace
  2. DS-1712

AuthorizeException when Non-Admin users mark Items as "private" during deposit

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 3.0, 3.1, 3.2
    • Fix Version/s: 4.0
    • Component/s: JSPUI, XMLUI
    • Labels:
      None
    • Attachments:
      0
    • Comments:
      2
    • Documentation Status:
      Needed

      Description

      To reproduce

      1. Deposit an item as a non-admin user (e.g. the Demo Submitter on demo.dspace.org)
      2. On the "Access" page, select the "Make Private" checkbox
      3. On completion of the submission you will receive an "AuthorizeException":

      org.dspace.authorize.AuthorizeException: To withdraw item must be COLLECTION_ADMIN or have REMOVE authorization on owning Collection
      at org.dspace.app.util.AuthorizeUtil.authorizeWithdrawItem(AuthorizeUtil.java:574)
      at org.dspace.content.Item.withdraw(Item.java:1870)
      at org.dspace.content.InstallItem.finishItem(InstallItem.java:200)
      at org.dspace.content.InstallItem.installItem(InstallItem.java:78)
      at org.dspace.content.InstallItem.installItem(InstallItem.java:44)

      The problem is that a non-Admin user cannot withdrawn an item, but all "private" items are currently being withdrawn.

      This bug is directly related to DS-1711. It might be resolved by the same fix as DS-1711.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              bollini Andrea Bollini (4Science)
              Reporter:
              tdonohue Tim Donohue
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: