...
SAK-354: Add Role based SU security
SU tool uses Security(Service).isSuperUser() to determine who can SU. This should be modified to use agent ,/- function /- target ....
IT Express - can su - students
IT Express - can su - faculty
IT Express - cannot su - admin
...
The template permission matrix with an example of source, function, target, and results:
source | function | target | result |
|---|---|---|---|
user A | can SU | user B | true/false |
| Panel | ||
|---|---|---|
| ||
SuperUser = any user who the ability to edit the Administration Workspace (i.e., a SmartSite admin user)
|
What is expected:
test Test # | source | function | target | result | ||
|---|---|---|---|---|---|---|
Test | # 3 | SuperUser | can SU | SuperUser | false | |
| test 3 | SuperUser | can SU | Priv User | true | |
| SuperUser | can SU | Standard User | true |
| |
Test 5 | Standard User | can SU | SuperUser | false | ||
| test 5 | Standard User | can SU | Priv User | false |
|
Test 4 | Standard User | can SU | Standard User | false |
| |
test 4 Test 6a | Priv User | can SU | SuperUser | false |
| |
test 6a Test 6b | Priv User | can SU | Standard User | true | ||
test 6b | Priv User | can SU | Priv User | true |
|
|
Preparation
- a test site with SU Tool installed (see #SU Tool Setup to set up a course)
- at least two non SuperUser accounts in the test site
- at least two SuperUser accounts
...