Development/Functional testing/Access control tests - Revision history

Crogers: /* View drafts */

2018-10-10T20:15:29Z

‎View drafts

Crogers at 20:09, 10 October 2018

2018-10-10T20:09:31Z

Crogers: /* Edit user basic information */

2018-10-10T18:57:33Z

‎Edit user basic information

Crogers: /* Create groups */

2018-10-10T18:56:35Z

‎Create groups

Crogers: /* Create groups */

2018-10-10T18:55:33Z

‎Create groups

Crogers: /* Edit user permissions */

2018-10-10T18:50:50Z

‎Edit user permissions

Crogers: /* Create groups */

2018-10-10T18:37:17Z

‎Create groups

Dan: Update page title, breadcrumb, and spacing

2014-08-12T23:42:49Z

Update page title, breadcrumb, and spacing

Dan: Migrate basic page content from Qubit wiki; edit for relevance to 2.x

2014-07-10T20:51:39Z

Migrate basic page content from Qubit wiki; edit for relevance to 2.x

New page

[[Main Page]] > [[Development]] > [[Development/Functional testing]] > Access control tests

These tests help determine that AtoM's user, group, and permissions management modules function as expected. For more information on the expected behaviors of each, see the "Manage user accounts and user groups" and "Edit user permissions" pages in the ADMINISTER section of our [https://www.accesstomemory.org/docs/ AtoM User Manual].

== Create groups ==

*Administrators can navigate to group edit screen by clicking Admin > Groups
*Administrator can edit and save changes to administrator, anonymous and authenticated groups but can't delete them
*Administrator can edit and save changes to contributor, editor and translator groups and can delete them
*Administrator can edit data in all fields
*Administrator can delete permissions [https://projects.artefactual.com/issues/4274 #4724]
*Administrator can add a new group
*Adding a user to a group causes the user to have the permissions assigned to the group
*Editing permissions for a user overrides permissions inherited from the group for that user

== Edit user basic information==

*Administrators can navigate to user edit screen by clicking '''admin > users > add new''' or '''admin > users > (user name) > edit'''
*Administrator can create and edit data in all fields in Basic info area
*Clicking Create or Save opens the user show screen with all changes saved
*Clicking Cancel opens the user show screen with no changes saved

== Edit user permissions ==

*Administrator can assign the user to one or more groups
*Administrator does not have to assign the user to a group
*All scenarios described at http://ica-atom.org/doc/UM-7.2_1.0.9 can be run successfully

== Hierarchy treeview ==

*Only authenticated users with update permission can drag and drop information objects within the information object hierarchy treeview
*Users who have update permission only for specified repositories can drag and drop information objects linked to those repositories only

== View drafts ==

* Unauthenticated users do not retrieve draft information objects in search or browse results
* Unauthenticated users do not see draft descriptions listed in context menu boxes of repository or actor show screens
* For unauthenticated users, directly entering a url for a draft description forwards to an access denied page
* On informationobject/browse page, authenticated users see only published fonds and draft fonds to which they have view draft permissions
* Search results by authenticated users only show published descriptions and draft fonds to which they have view draft permissions
* On repository/show page, authenticated users see only published fonds and draft fonds to which they have view draft permissions
* For authenticated users, directly entering a url for a draft description forwards to "permission denied" page if user does not have view draft access to resource

==Translate==
* Translate group grants ability to translate to all languages - issues [https://projects.artefactual.com/issues/3667 #3667] and [https://projects.artefactual.com/issues/4279 #4279]
* Administrator group grants ability to translate to all languages
* Other users can only translate to languages specified in "Allowed languages for translation" field in Access control div of user edit screen (at this time, this function does not seem to be working properly in 1.3, but it cannot be properly tested until the above issues are resolved)

[[Category:Development documentation]]

__NOTOC__

← Older revision		Revision as of 18:56, 10 October 2018
Line 6:		Line 6:


−	== Create groups ==	+	== Create and edit groups ==

	*Administrators can navigate to group edit screen by clicking Admin > Groups		*Administrators can navigate to group edit screen by clicking Admin > Groups

← Older revision		Revision as of 23:42, 12 August 2014
Line 1:		Line 1:
−	[[Main Page]] > [[Development]] > [[Development/Functional testing]] > Access control tests	+	{{#pagetitle: Access control tests }}
		+	[[Main Page]] > [[Development]] > [[Development/Functional testing]] > Development/Functional testing/Access control tests
		+

	These tests help determine that AtoM's user, group, and permissions management modules function as expected. For more information on the expected behaviors of each, see the "Manage user accounts and user groups" and "Edit user permissions" pages in the ADMINISTER section of our [https://www.accesstomemory.org/docs/ AtoM User Manual].		These tests help determine that AtoM's user, group, and permissions management modules function as expected. For more information on the expected behaviors of each, see the "Manage user accounts and user groups" and "Edit user permissions" pages in the ADMINISTER section of our [https://www.accesstomemory.org/docs/ AtoM User Manual].

@@ Line 33: / Line 33: @@
 == View drafts ==
-* Unauthenticated users do not retrieve draft information objects in search or browse results
+* Unauthenticated users will not see draft information objects in search or browse results
-* Unauthenticated users do not see draft descriptions listed in context menu boxes of repository or actor show screens
+* Unauthenticated users will not see draft descriptions listed in context menu boxes of repository or actor show screens
 * For unauthenticated users, directly entering a url for a draft description forwards to an access denied page
-* On informationobject/browse page, authenticated users see only published fonds and draft fonds to which they have view draft permissions
+* Authenticated users will see only published descriptions and draft descriptions to which they have view draft permissions on information object/browse page
-* Search results by authenticated users only show published descriptions and draft fonds to which they have view draft permissions
+* Authenticated users will see only published descriptions and draft descriptions to which they have view draft permissions in search results
-* On repository/show page, authenticated users see only published fonds and draft fonds to which they have view draft permissions
+* Authenticated users will see only published descriptions and draft descriptions to which they have view draft permissions on repository/show page
 * For authenticated users, directly entering a url for a draft description forwards to "permission denied" page if user does not have view draft access to resource

@@ Line 30: / Line 30: @@
 *Administrator can remove a user from one or more groups
 *All scenarios described at http://ica-atom.org/doc/UM-7.2_1.0.9 can be run successfully
 == View drafts ==

@@ Line 17: / Line 17: @@
 *Editing permissions for a user overrides permissions inherited from the group for that user
-== Edit user basic information==
+== Create user and edit user basic information==
 *Administrators can navigate to user edit screen by clicking '''admin > users > add new''' or '''admin > users > (user name) > edit'''

@@ Line 9: / Line 9: @@
 *Administrators can navigate to group edit screen by clicking Admin > Groups
 *Administrator can edit and save changes to administrator, anonymous and authenticated groups but can't delete them
 *Administrator can edit and save changes to contributor, editor and translator groups and can delete them
 *Administrator can edit data in all fields
 *Administrator can delete permissions
 *Adding a user to a group causes the user to have the permissions assigned to the group
 *Editing permissions for a user overrides permissions inherited from the group for that user

@@ Line 26: / Line 26: @@
 == Edit user permissions ==
-*Administrator can assign the user to one or more groups
+*Administrator can assign a user to one or more groups
-*Administrator does not have to assign the user to a group
+*Administrator does not have to assign a user to a group
 *All scenarios described at http://ica-atom.org/doc/UM-7.2_1.0.9 can be run successfully