Google Drive Permissions

Options on google assignments

Delete and reassign approach

Update approach

Permission Assignment Logic

uhtnp is never removed from the google drive.

EXLUDED role never has google permissions so do nothing related to this role.

APPLICANT role permissions are controlled by the system, meaning that the applicant cannot be removed from this role once it’s set.

If a user is removed from an application_role (committee member, APPEALS_PANEL, COLLEAGUE) for an application

• if the user holds a system_role (CHANCELLOR, COORDINATOR, EXAMINER, UHPA_REP) for the office of the application

  • do not remove their google drive permissions

• otherwise

  • remove them from the google drive for that application

If a user is removed from a system role (CHANCELLOR, COORDINATOR)

• search for all applications for the office

• search the application_role table where the user holds an application role (committee member, APPEALS_PANEL, COLLEAGUE) and return the person_id, application_id, role_id, office_id (from the application), state_id (from the application)

  • loop through the applications from first query

    • if application.office_id = system_role.office_id

      • if the application_role is COLLEAGUE and in State 101, don’t add application to List

      • if the application_role is APPEALS_PANEL and in State 118, don’t add application to List

      • if the application role is committee member

        • if the status of the application is at that committee member’s committee

          • don’t add application to List

    • add application to List

• List is the applications to pass in to PermissionServiceImpl.revokeAccess(List<Application> applications, Person p)