Hello Assaf, This issue has been resolved in changed 2462, which is now available for download. Thanks very much for finding this. Greg Von Kuster Galaxy Development Team Assaf Gordon wrote:

Hello,

What needs to be configured in order to limit users to their own datasets ?

What I mean is that on my local server (using external authentication, but no security groups/roles defined), I can use the following URL to view my datasets; http://rave.cshl.edu/galaxy/datasets/35819/display/index

But I can also change the dataset ID and view any other file, regardless of whether it is mine or not.

I'd like to block access to other users' datasets (but I prefer not to create specialized roles/groups).

Thanks, Gordon.

_______________________________________________ galaxy-dev mailing list galaxy-dev@bx.psu.edu http://mail.bx.psu.edu/cgi-bin/mailman/listinfo/galaxy-dev