Consider/investigate limiting editor role to only be able to edit/publish/unpublish/delete MRs they created

[david-fong-bc]

question Further information is requested

---

What's your Question?

The documentation for MR permissions for users with the editor role say that users with the editor role are authorized to edit and publish any MR for their organization (OPR of MR matches Organization of editor).

Nicole is confident that she prefers users with the editor role to only be able to edit/publish/unpublish/delete MRs they authored (created), and that users with the manager role should be able to edit/publish/unpublish/delete any MR in their organization (OPR of MR matches Organization of manager). (@NicoledeGreef, please correct me if I misunderstood you!)

This issue ticket is to open up discussion on what the editor and manager roles should be able to do, and how to implement those changes (permissions and documentation).

[david-fong-bc]

Note: If a user leaves their organization, the administrator can assign authorship of a MR to another user.

Dan thinks this is a good idea.

Caveat: make sure to review, test, and post changes.

[NicoledeGreef]

Agree:

• Users with the Catalogue editor role should be able to create/publish/unpublish/delete MRs that they created for their Organization.
• Users with the Catalogue manager role should be able to publish/unpublish/delete MRs for their Organization regardless of which user created the MR; they can create MRs within their Organization as well.