Attribute privileges

Learning Objectives

  • Attribute privileges

Exercise: Show attribute privileges

Open on browser

Log in as banderson

Navigate to the "etc:attribute" folder

Create attribute definition: TestFolderFlagDef

  • Type: attribute
  • Assign to: folders
  • Value: no value (marker)

Create an attribute name in etc:attribute, name: TestFolderFlag

Navigate to TestFolderFlagDef

Click on privileges tab

Grant READ to jsmith

Navigate to test folder

More actions → attribute assignments

Assign TestFolderFlag

Open another browser (not just a tab since cookies are shared)

Log in as jsmith

Navigate to "test" folder

Try to see attribute under More actions → attribute assignments

banderson browser:

  • Navigate to test folder
  • Privileges tab
  • Grant "attribute read" to jsmith

jsmith browser:

  • Navigate to "test" folder
  • Try to see attribute under More actions → attribute assignments

banderson browser:

  • Set attestation for the test folder
  • show folder attributes

jsmith browser:

  • show folder attributes

banderson browser:

  • Assign UPDATE to the attribute definition to jsmith

jsmith browser:

  • Can jsmith delete the folder attribute?

banderson browser:

  • grant ATTR_UPDATE to the test folder for jsmith

jsmith browser:

  • Can jsmith delete the folder attribute now?



  • No labels