feat(preferences): Add “Collection Preferences” page with role-gated access #7464

Gitesh307 · 2025-10-01T01:24:46Z

This PR introduces a new feature Collection Preferences page that consolidates collection-level settings such as picklists, attachments, tree management, statistics, Specify Network integration, and catalog number inheritance. Updated localization handling to use explicit function calls, resolving scanner issues. No database changes; existing preferences migrate automatically at the collection level.

Checklist

Self-review the PR after opening it to make sure the changes look good and
self-explanatory (or properly documented)
Add relevant issue to release milestone

Testing instructions

Verify the new Collection Preferences menu is visible only to authorized roles, settings can be saved and persist per collection.
Modify values in each section, ensure they save and persist after reload, and verify that the Reset button restores defaults correctly.

Test each option and verify application behavior responds to the setting

General

Scope "Entire Table" Picklists
Make Attachments Public By Default

Tree Management

If enabled, this allows users to add children to synonymized parents and to synonymize a node with children.

Statistics

Show Preparation Totals
Auto-Refresh Rate (Hours)
The following two cannot really be tested at the moment...
GBIF Publishing Organization Key
GBIF Data Set Key

Catalog Number Inheritance

Enable Catalog number Inheritance From Primary Collection Object
Enable Catalog number Inheritance From Parent Collection Object

… issue-6843

Triggered by 30c35c6 on branch refs/heads/issue-6843

… issue-6843

Triggered by 95c7c50 on branch refs/heads/issue-6843

…s.tsx Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

This reverts commit e7c7afe.

… issue-6843

@CarolineDenis

Suggested by @CarolineDenis

Triggered by 86a8e33 on branch refs/heads/issue-6843

Triggered by 5d91e20 on branch refs/heads/issue-6843

Triggered by 579a30b on branch refs/heads/issue-7440

grantfitzsimmons · 2025-11-05T14:09:49Z

From my last review on the rebased PR for context:

General

Scope "Entire Table" Picklists

This setting seems to have no effect. I defined a pick list named "COTTypes" that is based on the CollectionObjectType table, which should return all options if it is not scoped.

It still shows 2 results when unchecked despite there being many in the database:

Make Attachments Public By Default

Works exactly as expected. IsPublic is checked when adding a new attachment when enabled, it is not checked when it is not.

Tree Management

If enabled, this allows users to add children to synonymized parents and to synonymize a node with children.

Note: Immediately after setting this, I received the errors described for Storage for Taxon both when adding a child to a synonym and when trying to merge synonyms. Only after logging out and back in was I able to do this without errors... @Gitesh307 do you have the same issue?

Taxon

Storage

Synonymizing nodes with children:

errorOnSynonymy.mov
('Synonymizing node "316cd2" which has children', {'tree': 'Taxon', 'localizationKey': 'nodeSynonimizeWithChildren', 'node': {'id': 5812, 'rankid': 375, 'fullName': '316cd2', 'children': [{'id': 7029, 'fullname': 'Different Child, 316cd2'}]}, 'parent': {'id': 5810, 'rankid': 375, 'fullName': '24e0f0', 'parentid': 1, 'children': [{'id': 7028, 'fullname': 'Test, 24e0f0'}]}})
Specify 7 Crash Report - 2025-10-31T16_28_43.133Z.txt

Adding a Child:

`ValueError** at /api/specify/storage/ 'Storage' instance needs to have a primary key value before this relationship can be used.

errorOnChild.mov

Specify 7 Crash Report - 2025-10-31T16_27_01.097Z.txt

Going to hold off testing the other trees until this is fixed.

Statistics

Show Preparation Totals

Regardless of the setting, I am not seeing preparation totals:

Catalog Number Inheritance

Enable Catalog number Inheritance From Primary Collection Object

Doesn't seem to be respected:

Enable Catalog number Inheritance From Parent Collection Object

Will test remainder once these are fixed.

grantfitzsimmons · 2025-11-05T14:12:23Z

specifyweb/backend/trees/extras.py

CarolineDenis · 2025-11-12T15:51:59Z

specifyweb/frontend/js_src/lib/components/Preferences/index.tsx

+            const props = {
+              className: `
+                flex items-start gap-2 md:flex-row flex-col
+                ${canEdit ? '' : '!cursor-not-allowed'}


is this secure enough?

That just affects cursor/UX. The real permission check comes from canEdit flowing into the ReadOnlyContext, which disables the inputs and prevents writes. That matches how the existing user-preferences UI enforces permissions, and the server still validates everything, so the security level is the same as production.

grantfitzsimmons

Verify the new Collection Preferences menu is visible only to authorized roles, settings can be saved and persist per collection.

After looking at this some more, can you provide some more insight here? It seems like we need to expand or clarify the permission for CollectionPreferences as this is not explicitly added as an option.

What is the criteria for "authorized roles" in this case?

Modify values in each section, ensure they save and persist after reload, and verify that the Reset button restores defaults correctly.