Attribute privileges
Learning Objectives
- Attribute privileges
Exercise: Show attribute privileges
Open on browser
Log in as banderson
Navigate to the "etc:attribute" folder
Create attribute definition: TestFolderFlagDef
- Type: attribute
- Assign to: folders
- Value: no value (marker)
Create an attribute name in etc:attribute, name: TestFolderFlag
Navigate to TestFolderFlagDef
Click on privileges tab
Grant READ to jsmith
Navigate to test folder
More actions → attribute assignments
Assign TestFolderFlag
Open another browser (not just a tab since cookies are shared)
Log in as jsmith
Navigate to "test" folder
Try to see attribute under More actions → attribute assignments
banderson browser:
- Navigate to test folder
- Privileges tab
- Grant "attribute read" to jsmith
jsmith browser:
- Navigate to "test" folder
- Try to see attribute under More actions → attribute assignments
banderson browser:
- Set attestation for the test folder
- show folder attributes
jsmith browser:
- show folder attributes
banderson browser:
- Assign UPDATE to the attribute definition to jsmith
jsmith browser:
- Can jsmith delete the folder attribute?
banderson browser:
- grant ATTR_UPDATE to the test folder for jsmith
jsmith browser:
- Can jsmith delete the folder attribute now?