VIVO-4030

[litvinovg]

VIVO GitHub issue

What does this pull request do?

Created policy data sets for publish operations on properties by users with public role.
Created policy data sets for publish operations on classes by users with public role.
Removed exceptional case related to publish operation and public role in edit form.
Adjusted authorization migration script to retain publish and update permissions related to public role.
Created migration for instances which have already updated to access control configuration version 1, which is part of VIVO 1.15.0

How should this be tested?

Try migration for VIVO instances earlier than 1.15.0 release. Verify that publish permissions related to public role are preserved and could be modified.
For VIVO 1.15.0 this fix should allow to assign publish property permissions to public role.

Interested parties

@VIVO-project/vivo-committers

Reviewers' expertise

Candidates for reviewing this PR should have some of the following expertises:

1. Java
2. N3
3. Vitro access ontology

Reviewers' report template

Please update the following template which should be used by reviewers.

General comment

A reviewer should provide here comments and suggestions for requested changes if any.

Testing

A reviewer should briefly describe here how it was tested

Code reviewing

A reviewer should briefly describe here which part was code reviewed

[brianjlowe]

The migration from 1.14 doesn't seem to be working for me. Here are the steps I did:

1. Clean install of 1.14.3 with empty tdbContentModels.
2. Edit object property "access provided by (scires)".
3. Set publish permission to "curator and above"; save property.
4. Create new object property.
5. Set publish permission to "editor and above"; save property.
6. Clean install of PR.
7. Open "access provided by".
8. Publish permission is set to "public" (should be curator and above).
9. Open new property I created.
10. No permissions checkboxes are checked (should be publish to editor and above; public display/edit).

[litvinovg]

First step should be to clean tdbConfigurationModels, not tdbContentModels

[brianjlowe]

Repeating the above steps with both empty tdbModels and tdbContentModels at start improves one aspect. Now the new property I added in step 4 has permissions checked, but the publish permissions for both this and the "access provided by" properties are still wrong. After the upgrade using the PR, I have all the publish checkboxes checked for both properties, when one should be only curator and above and the other should be only editor and above.