Project

General

Profile

Actions

Support #24471

open

Group Member can edit content in the Library

Added by Marilyn Weber about 1 month ago. Updated 4 days ago.

Status:
Staged for Production Release
Priority name:
Normal
Category name:
Group Library
Target version:
Start date:
2026-02-20
Due date:
% Done:

0%

Estimated time:
Deployment actions:

Description

Via keeping, Mariya Gluzman reports

"We are having some issues with the permissions settings in the group BCEI Learning Modules (https://commons.gc.cuny.edu/groups/program-participants-402589737/). We created two test user accounts that we added as Members to the group. From my understanding, a Member should not be able to edit any of the content in the Library. However, when we view content there, Edit is one of the options. "

I went in to test and she is correct. Added Colin and Laurie to this ticket as we discussed it on the call


Files

Screenshot_2026-03-18_06-43-05.png (50.4 KB) Screenshot_2026-03-18_06-43-05.png Boone Gorges, 2026-03-18 07:44 AM
Actions #1

Updated by Raymond Hoh 27 days ago

I believe the original intention behind Group Library Docs was to allow any group member to make modifications to a Doc. However the use case brought up in Keeping about limiting doc edit access to group admins and moderators makes sense.

If we want to implement this, we would need to make some changes to the Group Library and to the buddypress-docs-in-group plugin to show some additional doc options. Boone, in vanilla BuddyPress Docs, it is possible to set the access control for each group's document:

However the buddypress-docs-in-group plugin removes the "Access" controls when creating or editing a group doc: https://github.com/boonebgorges/buddypress-docs-in-group/blob/ea686cde3da444366a2915c2886ce46e5f36503d/includes/bpdig.php#L194

Removing the Access section was probably done to simplify doc access controls within the group, but would it make sense to bring the Access block back, but adding each group membership level as an additional option? Or perhaps these access controls could be configured at the group level under a group's "Manage > Group Settings" section as well?

As it pertains to the Group Library, Group Library outputs its own version of BuddyPress Docs settings -- https://github.com/cuny-academic-commons/cac-group-library/blob/master/assets/js/app/components/Forms/BpDocForm.vue -- which would need to be modified if we wanted to add back the Access section at the individual doc level.

Actions #2

Updated by Boone Gorges 26 days ago

  • Category name set to Group Library
  • Target version set to 2.8.0

Ray, thanks so much for jumping in.

Ray is correct that Docs work this way intentionally. We made the decision long ago that we would simply allow group Docs to be edited by anyone in the group. Other types of library items, in contrast, can be edited only by (a) the item author, or (b) those users who are group admins or mods.

That being said, I can see why you might not want it to work this way. I like the idea of adding item-level controls over who can edit/delete an item. These would be similar to the 'Who can edit this Doc?' dropdown from Ray's screenshot, though perhaps we'd want to make it radio buttons instead: Allow this doc to be edited by [] any group member [] author/admin only. Or something like that. It would be important to make this work across all item types, not just bp_doc - so 'Editable Doc', 'Uploaded File', 'External Link'. The setting wouldn't apply to 'Forum Attachment', since that would only be editable by those with permission to edit the forum attachment anyway.

If others think this is a worthwhile project, we could work on it for an upcoming release.

Actions #3

Updated by Colin McDonald 6 days ago

  • Assignee set to Colin McDonald

As discussed in the Friday monthly meeting, we're going to hold off on a larger dev fix here, as this is likely an edge case, especially because Docs are rarely used. Instead, let's try to clarify this to users with help text / documentation.

Let's also make Docs work the same as other Library items (if I have this correct), where they can only be edited by the original uploader and group admins/moderators.

Currently when you go to add a new Library item, you see this paragraph:

You can select three different types of items to add to your Library. Files are standalone uploads from your desktop like images, PDFs or Word Docs (similar to an email attachment). Docs are editable documents you can create and edit via your Library later. External Links point to an item hosted elsewhere on the web, like Google, Dropbox, or Microsoft OneDrive.

What if we just add a sentence to the end of this that says:

Once an item is uploaded to the Library, it can only be edited or removed by the original uploader and any group Admin or Moderator.

Also adding Scott as a watcher so he can update documentation once we resolve the rest of this.

Actions #4

Updated by Boone Gorges 5 days ago

I'm on board with making documentation/text updates, but I'm a bit confused by the following:

As discussed in the Friday monthly meeting, we're going to hold off on a larger dev fix here, as this is likely an edge case, especially because Docs are rarely used. Instead, let's try to clarify this to users with help text / documentation.

Let's also make Docs work the same as other Library items (if I have this correct), where they can only be edited by the original uploader and group admins/moderators.

I think that we should NOT change the behavior of Docs. The whole purpose of this feature is to collaborate on a single document.

Actions #5

Updated by Colin McDonald 5 days ago

My fault. Let's use change the intro paragraph to this instead to reflect that Docs should remain editable by any group member:

You can select three different types of items to add to your Library. Files are standalone uploads from your desktop like images, PDFs or Word Docs (similar to an email attachment). External Links point to an item hosted elsewhere on the web, like Google or Dropbox. Docs are text documents that can be edited by any Group member. Files and external links can only be edited or removed by the original uploader or Group Admins and Moderators, but not by any other Group members.

Actions #6

Updated by Boone Gorges 5 days ago

Attaching a screenshot of the proposed text change. If this looks good, and if this is the only change we're making, we can do it for 2.7.0.

Actions #7

Updated by Colin McDonald 4 days ago

Looks good to me, thanks Boone!

Actions #8

Updated by Boone Gorges 4 days ago

  • Status changed from Reporter Feedback to Staged for Production Release
Actions

Also available in: Atom PDF