Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Add proper security to FileManagement repositories and views

Description

  • Add MODULE_FILE_{FileSet classname?}_READ/UPDATE/etc permission scheme

  • Each FileCategory would have its own permission

  • Update repository calls, views and menu to utilize this permission scheme

  • Remove @Secured from FileArchiveService methods

  • Refactor File Archive view to have a tab for each FileCategory

    • This may also make it easy to have customized HighlightViewers for each FileSet type

  • Add tests for FileArchiveService methods

  • Hide menu items when proper module(s) are not installed

  • Possibly default date for PayForm importing to date parsed from zip filename

Environment

None

Attachments

1

Activity

Dave Smith March 5, 2018 at 9:23 PM

approved for 120 payment.

boehm March 2, 2018 at 7:54 PM

No documentation updated needed on this issue.

Andrea

Matthew Calmes January 19, 2018 at 9:09 PM

  • To test a user would have the file archive module would need to be turned on and then a user without any MODULE_FILE permissions would need to make sure the file archive and file import options do not appear under the Utilities menu.

  • There are also three separate permissions that control specific behaviour

    • MODULE_FILE_PAYFORM

      • has _CREATE, _REPORT, _VIEW permissions 

      • controls whether an employee can create, report on or view payforms (payslips) via the file import and / or file archive tabs

    • MODULE_FILE_PAYROLLARCHIVE

      • has _REPORT and _VIEW permissions

      • controls ability to report on and view payroll archives (a.k.a payrollcd)

    • MODULE_FILE_W2ARCHIVE

      • has _CREATE, _REPORT and _VIEW

      • controls whether a user can create, report on and/or view W2 archives

    • having the create role for payform or w2archive allows a zip file containing pdfs of the payslips or w2s to be loaded using the file import option

      • the file name of the pdfs in the zip file need to conform use one of the excepted file seperators (i.e.) underscores

        • ex. 333333333_20180115_disrictname.pdf

        • in the example above you would set the filename segment to 1 signifying that is the position the employee number is in

    • the view permission will allow these files to be accessed and downloaded via the file archive interface

    • the report permission will allow these files to be reported on 

  • permissions can be manipulated in testing to ensure security is being applied correctly using the various permission schemes

Fixed

Details

Assignee

Reporter

QA Reviewers

olson

Story Points

Time tracking

4h logged

Sprint

Fix versions

Priority

Better PDF Exporter

Created January 4, 2018 at 10:00 PM
Updated October 9, 2019 at 4:31 PM
Resolved January 15, 2018 at 12:29 PM