Change in ovirt-engine[engine_3.2]: engine : User can see events which don't belong to him

[mpastern at redhat.com]

Michael Pasternak has submitted this change and it was merged.

Change subject: engine : User can see events which don't belong to him
......................................................................


engine : User can see events which don't belong to him

User can see events which are not related to objects he
has permissions on.

This patch introduces a new view user_object_permissions_view
which has the object on which the user has been granted permissions
on and uses it for retrieving the events.

Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38
Bug-Url: https://bugzilla.redhat.com/921274
Signed-off-by: Ravi Nori <rnori at redhat.com>
---
M backend/manager/dbscripts/audit_log_sp.sql
M backend/manager/dbscripts/create_views.sql
2 files changed, 30 insertions(+), 18 deletions(-)

Approvals:
  Michael Pasternak: Verified; Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/13373
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I7b7a6691f6cfa2ca1c0d0d90294ecd93781fce38
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: engine_3.2
Gerrit-Owner: Ravi Nori <rnori at redhat.com>
Gerrit-Reviewer: Michael Pasternak <mpastern at redhat.com>
Gerrit-Reviewer: Ofer Schreiber <oschreib at redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori at redhat.com>
Gerrit-Reviewer: Yair Zaslavsky <yzaslavs at redhat.com>