Change in ovirt-engine[master]: engine : User can see events which don't belong to him
Yair Zaslavsky has submitted this change and it was merged.
Change subject: engine : User can see events which don't belong to him
......................................................................
engine : User can see events which don't belong to him
User can see events which are not related to objects he
has permissions on.
This patch introduces a new view user_object_permissions_view
which has the object on which the user has been granted permissions
on and uses it for retrieving the events.
Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38
Bug-Url: https://bugzilla.redhat.com/921274
Signed-off-by: Ravi Nori <rnori(a)redhat.com>
---
M backend/manager/dbscripts/audit_log_sp.sql
M backend/manager/dbscripts/create_views.sql
2 files changed, 30 insertions(+), 18 deletions(-)
Approvals:
Yair Zaslavsky: Verified; Looks good to me, approved
--
To view, visit http://gerrit.ovirt.org/13091
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38
Gerrit-PatchSet: 6
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Michael Pasternak <mpastern(a)redhat.com>
Gerrit-Reviewer: Oved Ourfali <oourfali(a)redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com>
Gerrit-Reviewer: Yair Zaslavsky <yzaslavs(a)redhat.com>