Within our pilot deployments of local_archiving, we saw that local/archiving:delete is granted to the manager and teacher roles by default.
In my point of view, this grant violates the principle of immunity for this plugin. It would be counterproductive if teachers could delete archiv assets by default. Admins should be aware of this fact and grant this capability actively if needed.
Within our pilot deployments of local_archiving, we saw that local/archiving:delete is granted to the manager and teacher roles by default.
In my point of view, this grant violates the principle of immunity for this plugin. It would be counterproductive if teachers could delete archiv assets by default. Admins should be aware of this fact and grant this capability actively if needed.