Move group and owner setting to management panel

[etj]

group and owner settings should be moved from the metadata editor into the resource management panel.

More info on GeoNode/geonode#12958

[dsuren1]

@giohappy

I see some inconsistencies with transfer_resources (/users/{pk}/transfer_resources)

1. I cannot transfer a single resource to a user, the api supports only transfer of all resources
2. Even after transferring ownership, the previous user can still modify the transferred resource because permissions are not updated. Additionally, the poc still reflects the previous owner’s data
   Example
   

Kindly clarify

1. Only admin can perform ownership transfer?
2. User with change_resourcebase permission can modify group?
3. Should the new fields (group & owner) be grouped alongside Resource management or separately under Permissions or under a different named grouping?
   Mock
   

[giohappy]

1. Only admin can perform ownership transfer?

Yes, otherwise anybody could assign resources to users without their knowledge or acceptance, which is dangerous.
I'm thinking if the client is aware of the "admin" role of a user. I suspect no... In that case we need to think a solution to cover this case.

BTW since GeoNode has always allowed resource owners (even non-admin users) to change the owner of their resource, we might keep the logic as it is until we don't have a mechanism to make the client aware of the admin role of a user.

2. User with change_resourcebase permission can modify group?

Yes, as it is now. The group can be changed inside the metadata editor on 4.4.x

3. Should the new fields (group & owner) be grouped alongside Resource management or separately under Permissions or under a different named grouping?

We discussed the placement of permissions with @allyoucanmap recently. We are thinking to move permissions under the Management tab in the future (moving them away from the Share panel). However, for the moment they will stay there.

I think Owner and Group should be at the top of the Management panel and with reversed order (Owner comes first).

@mattiagiupponi let's quickly adapt the current ownership API to allow changing ownership of a single resource.

[mattiagiupponi]

Upstream GeoNode issue GeoNode/geonode#12996
Upstream GeoNode PR: GeoNode/geonode#12997

@dsuren1 please try with this branch ISSUE_12996

The call should be done as follow:

i want to transfer the ownership of the resources with PK 1,2,3,4 to the user 100 from user 2

import requests
import json

url = "http://localhost:8000/api/v2/users/2/transfer_resources"

payload = json.dumps({
  "owner": 100,
  "resources": [ 1,2,3,4]
})
headers = {
  'Content-Type': 'application/json',
  'Authorization': 'Basic YWRtaW46YWRtaW4=',
  'Cookie': 'sessionid=kalmpi10p4ovpzrhjko6tljhnnhhebss'
}

response = requests.request("POST", url, headers=headers, data=payload)

print(response.text)

[giohappy]

@dsuren1 did you test the API from the PR's branch?

[dsuren1]

@giohappy Yes

[giohappy]

@dsuren1 I will wait for your green light to merge

[dsuren1]

Even after transferring ownership, the previous user can still modify the transferred resource because permissions are not updated. Additionally, the poc still reflects the previous owner’s data

It seems the permission transfer is still not working as expected. @mattiagiupponi and I discussed this, and is working on amending this change on the backend