Change in ovirt-engine[master]: engine : User who can't manipulate users, can add user if h...
Yair Zaslavsky has submitted this change and it was merged.
Change subject: engine : User who can't manipulate users, can add user if he has
manipulate_permission action group.
......................................................................
engine : User who can't manipulate users, can add user if he has
manipulate_permission action group.
When user has manipulate_permission action group,
and doesn't have manipulate_users action group the user
should not be able to add new users to the system
Change-Id: Ib62e1c051bc78b8a9ec0f32e6ba4eb9484242591
Bug-Url: https://bugzilla.redhat.com/923100
Signed-off-by: Ravi Nori <rnori(a)redhat.com>
---
M
backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/AddPermissionCommand.java
1 file changed, 14 insertions(+), 2 deletions(-)
Approvals:
Yair Zaslavsky: Verified; Looks good to me, approved
--
To view, visit http://gerrit.ovirt.org/17593
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: Ib62e1c051bc78b8a9ec0f32e6ba4eb9484242591
Gerrit-PatchSet: 4
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Oved Ourfali <oourfali(a)redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Yair Zaslavsky <yzaslavs(a)redhat.com>
Gerrit-Reviewer: oVirt Jenkins CI Server