Current Behavior
Steps to reproduce the behavior
- Log in as an admin, go to ⚙️ > Groups.
- Either add a new group or edit contributor.
- Go to
Archival Institution Permissions and click edit.
- Set
Update permissions to Grant and hit save.
- Log in as a user with the role that was just edited.
- Attempt to edit existing contact information for an Archival institution.
- Notice that there is an error message. Opening the browser console also shows a 403 error, and the response shows the page complaining about not having permissions to access the page.
Expected Behavior
Having Update permissions to a repository should give the ability to edit its existing contact information as well.
Possible Solution
This is likely an ACL issue stemming from apps/qubit/modules/contactinformation/actions/indexAction.class.php checking for permission on a QubitContactInformation object.