Editor permission without deleting permission.

LabKey Support Forum
Editor permission without deleting permission. Chichero  2021-03-15 11:22
Status: Closed
 

Dear LabKey team,

Is there a way to allow a user to insert and update data in a dataset and a sample set without allowing for deleting this data?

Could you propose a workaround if it is not possible?

Thank you,
Natalia

 
 
adam responded:  2021-04-10 09:51

There is no built-in security role that supports read, insert, and update permissions, but disallows delete. The reasoning here is that update is effectively as destructive as delete, since with that permission I can change every value in the row to some other value.

If this is still an important requirement, then you could create and register a custom security role that grants just the permissions you want. This requires a Java module, but the code should be straightforward. See the existing EditorRole for a good starting point.

Adam

 
Chichero responded:  2021-04-22 06:35

Hi Adam,

Thank you for your advice. For our project it is essential not to loose samples which is a row with a sample ID in a Sample Set. So for us editing and deleting makes a difference. Unfortunately I know little about Java so deploying and editing a Java module for LabKey will be a complicated task. If I find time I will look into it.

In this case are there any possibilities to give editor roles to a group of people for a specific sample set? I did find this functionality for datasets.

Natalia

 
adam responded:  2021-05-04 16:51

As you found, LabKey Study provides fine-grained access control on a dataset-by-dataset basis and we improved this for the 21.3 release. Fine-grained access control for sample types is not currently an option, unfortunately. You could of course put the sample types in different folders and grant Editor permissions to different groups of users in each; you could even use a filtered schema to make all the sample types readable in a third folder. There are likely some downsides to this approach.

FYI: We have created custom security roles and implemented advanced security options to meet the specific needs of our clients; let us know if you have any interest in discussing.

Adam

 
Chichero responded:  2021-09-22 06:38

Hi Adam,

Would it be possible to organise a meeting to disscuss advanced security options? We will be glad to consider various solutions that can meet our needs.

Feel free to contact me via email,
Natalia