Michael Pasternak has submitted this change and it was merged. Change subject: engine : User can see events which don't belong to him ...................................................................... engine : User can see events which don't belong to him User can see events which are not related to objects he has permissions on. This patch introduces a new view user_object_permissions_view which has the object on which the user has been granted permissions on and uses it for retrieving the events. Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38 Bug-Url: https://bugzilla.redhat.com/921274 Signed-off-by: Ravi Nori <rnori@redhat.com> --- M backend/manager/dbscripts/audit_log_sp.sql M backend/manager/dbscripts/create_views.sql 2 files changed, 30 insertions(+), 18 deletions(-) Approvals: Michael Pasternak: Verified; Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/13373 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38 Gerrit-PatchSet: 2 Gerrit-Project: ovirt-engine Gerrit-Branch: engine_3.2 Gerrit-Owner: Ravi Nori <rnori@redhat.com> Gerrit-Reviewer: Michael Pasternak <mpastern@redhat.com> Gerrit-Reviewer: Ofer Schreiber <oschreib@redhat.com> Gerrit-Reviewer: Ravi Nori <rnori@redhat.com> Gerrit-Reviewer: Yair Zaslavsky <yzaslavs@redhat.com>