[AIRAVATA-3252] BUG: Disable user can clone and create an experiment

• Type: Sub-task
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.18
• Fix Version/s: 0.19
• Component/s: Django Portal
• Environment: https://django.staging.seagrid.org
• Assignee: Marcus Christie
• Reporter: Eroma
• Created: 02/Nov/19 03:37
• Updated: 02/Nov/19 03:37

Description

1. User A created a group and added disabled user B in to the group. Disable means still not added to an active group.
2. then shared a completed experiment with the group.
3. Now user B logged in and went to browse experiments in Django portal.
4. User B has the shared experiment and was able to click clone.
5. In edit experiment the group resource profile is empty but can save and launch the experiment.
6. Experiment did not get really launched but User B was able to create experiments.
7. Even though sharing is possible with disabled users, may be they should not be able to do anything with those shared experiments.