irods: A groupadmin cannot remove users from groups
Bug Report
iRODS Version, OS and Version
4.2.11, 4.3.0 - Ubuntu 18
What did you try to do?
Remove a user from a group as an groupadmin
Expected behavior
Since as a groupadmin we can create users and groups, and add users to groups, we should also be able to remove them from groups. This is advertised in the igroupadmin help text as the rfg subcommand.
Observed behavior (including steps to reproduce, if applicable)
As a groupadmin-type user:
$ igroupadmin mkgroup lab3
$ igroupadmin mkuser user1
$ igroupadmin atg lab3 user1
$ igroupadmin rfg lab3 user1
remote addresses: 127.0.0.1 ERROR: rcUserAdmin failed with error -830000 CAT_INSUFFICIENT_PRIVILEGE_LEVEL
So user1 currently must be removed from the lab3 group by a rodsadmin, which can be done with either iadmin rfg ... or igroupadmin rfg ...
About this issue
- Original URL
- State: closed
- Created a year ago
- Comments: 30 (23 by maintainers)
Commits related to this issue
- remove irods/irods#6885 comment as it is not an actual bug (just a documentation exercise). — committed to d-w-moore/python-irodsclient by d-w-moore a year ago
as long as we cover the work, and help the future forensics teams figure out what happened, doesn’t matter to me.
Ah, great. So this is a documentation issue now, only. Making this story easier to understand in the help text and/or main irods_docs.
definitely get a test written first please. this is quite surprising.