Change in ovirt-engine[master]: restapi: Disable Get Groups For Non-Admin User

mpastern at redhat.com mpastern at redhat.com
Sun Jun 2 11:15:07 UTC 2013


Michael Pasternak has submitted this change and it was merged.

Change subject: restapi: Disable Get Groups For Non-Admin User
......................................................................


restapi: Disable Get Groups For Non-Admin User

Getting Groups for non-admin user is wrongly implemented. It currently returns -
instead of all groups which the user is authorized to see - exactly one User entity,
(the user himself). Needless to say this is very far from the intended result.

Until new implementation will be avaliable, I am removing this wrong implementation.
For now the outcome will now be: user will fail due to insufficient permission.

Change-Id: I932a197271ccfa52418276ec4ddfb4c5db95e0a0
Signed-off-by: Ori Liel <oliel at redhat.com>
---
M backend/manager/modules/restapi/jaxrs/src/main/java/org/ovirt/engine/api/restapi/resource/BackendGroupsResource.java
1 file changed, 1 insertion(+), 8 deletions(-)

Approvals:
  Michael Pasternak: Verified; Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/14894
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I932a197271ccfa52418276ec4ddfb4c5db95e0a0
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ori Liel <oliel at redhat.com>
Gerrit-Reviewer: Michael Pasternak <mpastern at redhat.com>



More information about the Engine-commits mailing list