Change Permissions for Workspace to Allow Customization by LANDA Members (LANDA-463 / LAN-619)

[melanieroedel]

Goals:

• LANDA Members can still customize their own workspace
• LANDA Members can reset their workspace, e.g. after an update
• users cannot see workspaces of other users

Problem:

• When a user customizes their workspace, it is created by the user "Administrator", not the user that was logged in
• Workspaces are labeled with the users name (=email), which means users can see other users email addresses in the workspace title if they have read permission (as well as any secret customizations other users might have performed)

[barredterra]

Jeder darf beliebige Workspaces löschen? 🤔

[melanieroedel]

Nicht schön und nur eine Notlösung, aber es geht, solange man nur seine eigenen Workspaces sieht (von denen man irgendwie der Owner ist, ohne sie erstellt zu haben). So kann man auch keine Standard Workspaces löschen.
Gerne einfach mal probieren. Ich kam durch Zufall zu dieser Lösung

[barredterra]

"if_owner": 1 ist derzeit in aller Regel nicht der Fall

[melanieroedel]

Das sollte man meinen, aber es funktioniert. Ich bin durch Ausprobieren zu dieser Lösung gekommen.

[barredterra]

Maybe frappe/frappe#18795 in combination with removing read permission for "All" would solve our problems?

[melanieroedel]

@barredterra As far as I can tell frappe/frappe#18795 alone, which is included in the Frappe branch landa-version-13 solves the problem.
Let's install this on landa-dev and wait for Martin's review.

[barredterra]

To be solved in frappe: frappe/frappe#19496