Question: Manage library permissions
0
gravatar for christophe.habib
2.9 years ago by
France
christophe.habib • 340 wrote:

Hello everyone,

I used Bioblend (great API btw) to load all my libraries, and then to set permissions. I decided to restrict all my data libraries to my admin account (the email I use to connect to galaxy as admin).

So for all my libraries the "me@email.com" is in present in all permissions :

  • modify library item
  • access library
  • add library item
  • manage library permissions

So he is supposed to be the only one who should be able to access to the libraries. The  thing is, when I impersonate another user, he can access to all libraries. Why is that ?

I have 1 group/role per lab who will access to this instance, and I decided to associate my admin account to all this groups. Is it possible that users have access to libraries because 1 user in the group has the access as well ?

I really don't understand the behaviour of these permissions. Can you help me please ?

Thank you !

library permissions access • 806 views
ADD COMMENT • link • modified 2.9 years ago • written 2.9 years ago by christophe.habib • 340

Just checking: This could be due to the fact that you "impersonate another user"...have actually checked with another real user, what happens when she/he logs in?

Regards, Hans-Rudolf

ADD REPLY • link written 2.9 years ago by Hotz, Hans-Rudolf • 1.8k

Hi Hans-Rudolf, Thank you for your answer. I just tried to log in with another non-admin account on another computer, I still have access to all libraries :(

ADD REPLY • link written 2.9 years ago by christophe.habib • 340
0
gravatar for christophe.habib
2.9 years ago by
France
christophe.habib • 340 wrote:

Ok, the problem is solved, I think I misunderstood how to manage my roles/groups.

The problem is that I don't really know how to explain the differences between groups and roles, and the good way to specified the users in these 2 different items, even if it works the way I want to now.

I will be happy to read any explication about that. I didn't find any "rules" about the proper way to manage these things.

Thank you for your help.

ADD COMMENT • link written 2.9 years ago by christophe.habib • 340
Please log in to add an answer.

Help
Access

Use of this site constitutes acceptance of our User Agreement and Privacy Policy.
Powered by Biostar version 16.09
Traffic: 169 users visited in the last hour