[BUG]: No permAccessGroupRead permissions

[correct-horse-battery-bench]

Version Information

Rainbow 5

Hashcat

No response

Description

When navigating to create file form error "No permAccesssGroupRead permissions" occurs with a user that has no CRUD access to the AccessGroup.

This error should not occur as the request is just done to show the access groups of the current user in a dropdown. The access to a user's own resources should always be possible.

Probably needs a custom endpoint to fetch own's resources such as /users/me/accessGroups instead of
http://localhost:8080/api/v2/ui/users/2/accessGroups

[gluafamichl]

This is the expected and for 1.0 release accepted behavior for all the permission stuff. We should not touch this for 1.0, we need a complete rework of all the permission related functionality after 1.0 is released and the old UI is removed.

The accepted solution for 1.0 should be to just hide the file creation, if the permission is missing.

[s3inlc]

We cannot shift this after 1.0, because there is no way to give accessgroup READ only, so any user setup which has not only admins, cannot really work with that. That's why we should consider adding needed /me/ endpoints for accessgroups (and some other cases as well).