Yair Zaslavsky has submitted this change and it was merged. Change subject: engine : User who can't manipulate users, can add user if he has manipulate_permission action group. ...................................................................... engine : User who can't manipulate users, can add user if he has manipulate_permission action group. When user has manipulate_permission action group, and doesn't have manipulate_users action group the user should not be able to add new users to the system Change-Id: Ib62e1c051bc78b8a9ec0f32e6ba4eb9484242591 Bug-Url: https://bugzilla.redhat.com/923100 Signed-off-by: Ravi Nori <rnori@redhat.com> --- M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/AddPermissionCommand.java 1 file changed, 14 insertions(+), 2 deletions(-) Approvals: Yair Zaslavsky: Verified; Looks good to me, approved -- To view, visit http://gerrit.ovirt.org/17593 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: merged Gerrit-Change-Id: Ib62e1c051bc78b8a9ec0f32e6ba4eb9484242591 Gerrit-PatchSet: 4 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Ravi Nori <rnori@redhat.com> Gerrit-Reviewer: Oved Ourfali <oourfali@redhat.com> Gerrit-Reviewer: Ravi Nori <rnori@redhat.com> Gerrit-Reviewer: Yair Zaslavsky <yzaslavs@redhat.com> Gerrit-Reviewer: oVirt Jenkins CI Server