Ensure that a user can leave a collection.

[colinsullivan]

After #48 is complete, a user should be able to leave a collection in much the same way (update to use our new modified REST stuff). There might also be some sort of authorization issues here, because the user who is trying to modify the "Collection" object is not the admin. For now just hack this together.

[colinsullivan]

Also ensure that the LeaveCollectionEvent is being created.

[georgi0u]

So just to elaborate on this, for the sake of my own organization:

The basic problem is that collections model instances can only be edited by administrators of said collection instance.

A user leaving a collection (on the model layer) is semantically equivalent to editing the collection's 'users' field attribute, which is thus disallowed by the above rule.

A fix should involve some sort of conditional check to allow non-administrators to edit only the user's field of a collection.

[colinsullivan]

Yes, exactly.

---

Colin Sullivan
colin-sullivan.com
On 23 Apr 2011 16:08, "georgi0u" <
[email protected]>
wrote: