Permissions settings for seeing created by colums in sample tables

LabKey Support Forum
Permissions settings for seeing created by colums in sample tables katy wiseman  2024-02-26 05:30
Status: Active
 

Hi,

I've set up a series of tables in LabKey community where I am the site admin but other users are project and folder administrator. I am able to see the associated name of the user in the created by column however the other project/folder administrator is only able to see the key of the user (screenshot attached). Are there any permissions that I can give that aren't full system admin giving the ability to see the user names instead of the key?

I've tried giving her "See user and group details" permissions site wide but it didn't help.

Thanks,

Katy

 
 
mohara responded:  2024-02-26 11:05

Hi Katy:
Generally, a Project or Folder Admin should be able to see the user name in that column, or at least that's all I can reproduce locally. Can you give me a bit more information to help troubleshoot here?

  1. What version of LabKey are you using?
  2. What kind of table contains that column? Is it a Sample table? List? SQL Query?
  3. Is there a lookup or cross-container query or similar related to that table/that 'created by' column you show clipped?
  4. Is there anything unusual about userID 1220? If the Project Admin creates a new row themselves, can they see their own user name?
  5. If the Project Admin uses the grid customizer, can they "follow the lookup" and also expose the "Display Name" for the "Created By" column?

--Molly

 
katy wiseman responded:  2024-02-27 02:56

Hi Molly,

  1. What version of LabKey are you using? 23.3.2
  2. What kind of table contains that column? Is it a Sample table? List? SQL Query? It's a sample table
  3. Is there a lookup or cross-container query or similar related to that table/that 'created by' column you show clipped? No it's from the same table that I'm viewing
  4. Is there anything unusual about userID 1220? If the Project Admin creates a new row themselves, can they see their own user name? Yes she can see her own name. Other users can also view their name but no one elses, they come up as numbers for them.
  5. If the Project Admin uses the grid customizer, can they "follow the lookup" and also expose the "Display Name" for the "Created By" column? Display name shows as blank when added and viewed by the project/folder administrator for other people but shows the name for me for all users

Thanks,

Katy

 
mohara responded:  2024-02-27 09:08

Thanks, now I see what's happening.

My first recommendation is that you upgrade. Many updates, including security fixes, have happened since that version. At a minimum, upgrade to the latest maintenance release for 23.3, and ideally to the latest release available:

I can't reproduce this issue locally, so it's possible it's been fixed, and upgrading is all you'll need to do. Even readers should be able to see the display name of other users, though not other user details or group memberships.
If not, I believe the explanation is that these built-in lookups to user names are done on the "SiteUsers" table which is by design only accessible to site administrators. To display usernames to non-admins, you can edit the table metadata to make those lookups point to the project's "Users" table instead. Learn more about this in the documentation here:

As long as all you want to show is the username, assigning that other "See User and Group Details" role will not be necessary.

--Molly

 
katy wiseman responded:  2024-02-28 02:12

Hi Molly,

Thank you! I'ved asked IT to build an updated docker image for us with the latest version.

In the meantime the other solution has worked as well! Now it makes it much easier for her to track down users who've made a mess :).

Best,
Katy