[Registry-dev] [jira] Closed: (REGISTRY-384) Lifecycle promote/demote buttons are visible to anonymous users.

[Krishantha Samaraweera (JIRA)]

     [ https://wso2.org/jira/browse/REGISTRY-384?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Krishantha Samaraweera closed REGISTRY-384.
-------------------------------------------

                Assignee:     (was: Krishantha Samaraweera)
    Estimated Complexity: Unknown  (was: Moderate)

Verification done.

> Lifecycle promote/demote buttons are visible to anonymous users. 
> -----------------------------------------------------------------
>
>                 Key: REGISTRY-384
>                 URL: https://wso2.org/jira/browse/REGISTRY-384
>             Project: WSO2 Registry
>          Issue Type: Bug
>          Components: UI
>    Affects Versions: 1.1
>         Environment: Ubuntu 7.10,JDK 1.5,tomcat 6.0.14, Firefox/2.0.0.8
>            Reporter: Krishantha Samaraweera
>             Fix For: 1.1
>
>         Attachments: anonymous_user_LC.png
>
>
> Lifecycle promote/demote buttons are visible to anonymous users. 
> How to recreate:
> 1. Login as admin.
> 2. Add a resource r1 and promote it to Deployed state
> 3. Logout 
> 4. Then load load the registry UI as anonymous user.
> 5. Go to r1 resource page.
> Promote/demote button will be displayed to anonymous user. If user try to promote or demote the resource then below message is displayed. We need to validate user permission level and display these buttons accordingly.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://wso2.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira