Yair Zaslavsky has submitted this change and it was merged. Change subject: engine : User can see events which don't belong to him ...................................................................... engine : User can see events which don't belong to him User can see events which are not related to objects he has permissions on. This patch introduces a new view user_object_permissions_view which has the object on which the user has been granted permissions on and uses it for retrieving the events. Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38 Bug-Url: https://bugzilla.redhat.com/921274 Signed-off-by: Ravi Nori <rnori(a)redhat.com&gt; --- M backend/manager/dbscripts/audit_log_sp.sql M backend/manager/dbscripts/create_views.sql 2 files changed, 30 insertions(+), 18 deletions(-) Approvals: Yair Zaslavsky: Verified; Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/13091 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38 Gerrit-PatchSet: 6 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Ravi Nori <rnori(a)redhat.com&gt; Gerrit-Reviewer: Michael Pasternak <mpastern(a)redhat.com&gt; Gerrit-Reviewer: Oved Ourfali <oourfali(a)redhat.com&gt; Gerrit-Reviewer: Ravi Nori <rnori(a)redhat.com&gt; Gerrit-Reviewer: Yair Zaslavsky <yzaslavs(a)redhat.com&gt;