WIP: state change permissions

src/main/java/org/caosdb/server/permissions/EntityACL.java

@@ -253,7 +253,9 @@ public class EntityACL {
   public final Element toElement() {
     final Element ret = new Element("EntityACL");
 
-    for (final EntityACI aci : this.acl) {
+    final List<EntityACI> localAcl = new ArrayList<>(this.acl);
+    localAcl.addAll(GLOBAL_PERMISSIONS.acl);
+    for (final EntityACI aci : localAcl) {
       final boolean isDenial = isDenial(aci.getBitSet());
       final boolean isPriority = isPriorityBitSet(aci.getBitSet());
       final Element e = new Element(isDenial ? "Deny" : "Grant");

src/main/java/org/caosdb/server/transaction/Update.java

@@ -40,6 +40,7 @@ import org.caosdb.server.entity.FileProperties;
 import org.caosdb.server.entity.RetrieveEntity;
 import org.caosdb.server.entity.container.TransactionContainer;
 import org.caosdb.server.entity.container.UpdateContainer;
+import org.caosdb.server.entity.wrapper.EntityWrapper;
 import org.caosdb.server.entity.wrapper.Parent;
 import org.caosdb.server.entity.wrapper.Property;
 import org.caosdb.server.permissions.EntityPermission;
@@ -239,7 +240,8 @@ public class Update extends WriteTransaction<UpdateContainer> {
     }
 
     // entity role
-    if (newEntity.hasRole()
+    if (!(newEntity instanceof EntityWrapper)
+            && newEntity.hasRole()
             && oldEntity.hasRole()
             && !newEntity.getRole().equals(oldEntity.getRole())
         || newEntity.hasRole() ^ oldEntity.hasRole()) {