[Registry-dev] [jira] Resolved: (REGISTRY-384) Lifecycle promote/demote buttons are visible to anonymous users.

[Chanaka Jayasena (JIRA)]

     [ https://wso2.org/jira/browse/REGISTRY-384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chanaka Jayasena resolved REGISTRY-384.
---------------------------------------

         Assignee: Krishantha Samaraweera  (was: Chanaka Jayasena)
    Fix Version/s: 1.1
       Resolution: Fixed

Now Anonymous user can't see this button and also the user without write permission can't see it.

> Lifecycle promote/demote buttons are visible to anonymous users. 
> -----------------------------------------------------------------
>
>                 Key: REGISTRY-384
>                 URL: https://wso2.org/jira/browse/REGISTRY-384
>             Project: WSO2 Registry
>          Issue Type: Bug
>          Components: UI
>    Affects Versions: 1.1
>         Environment: Ubuntu 7.10,JDK 1.5,tomcat 6.0.14, Firefox/2.0.0.8
>            Reporter: Krishantha Samaraweera
>            Assignee: Krishantha Samaraweera
>             Fix For: 1.1
>
>         Attachments: anonymous_user_LC.png
>
>
> Lifecycle promote/demote buttons are visible to anonymous users. 
> How to recreate:
> 1. Login as admin.
> 2. Add a resource r1 and promote it to Deployed state
> 3. Logout 
> 4. Then load load the registry UI as anonymous user.
> 5. Go to r1 resource page.
> Promote/demote button will be displayed to anonymous user. If user try to promote or demote the resource then below message is displayed. We need to validate user permission level and display these buttons accordingly.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira