Michael Pasternak has submitted this change and it was merged.
Change subject: restapi: Disable Get Groups For Non-Admin User
......................................................................
restapi: Disable Get Groups For Non-Admin User
Getting Groups for non-admin user is wrongly implemented. It currently returns -
instead of all groups which the user is authorized to see - exactly one User entity,
(the user himself). Needless to say this is very far from the intended result.
Until new implementation will be avaliable, I am removing this wrong implementation.
For now the outcome will now be: user will fail due to insufficient permission.
Change-Id: I932a197271ccfa52418276ec4ddfb4c5db95e0a0
Signed-off-by: Ori Liel <oliel(a)redhat.com>
---
M
backend/manager/modules/restapi/jaxrs/src/main/java/org/ovirt/engine/api/restapi/resource/BackendGroupsResource.java
1 file changed, 1 insertion(+), 8 deletions(-)
Approvals:
Michael Pasternak: Verified; Looks good to me, approved
--
To view, visit
http://gerrit.ovirt.org/14894
To unsubscribe, visit
http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I932a197271ccfa52418276ec4ddfb4c5db95e0a0
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ori Liel <oliel(a)redhat.com>
Gerrit-Reviewer: Michael Pasternak <mpastern(a)redhat.com>