Change in ovirt-engine[master]: engine : User who can't manipulate users, can add user if h...

[yzaslavs at redhat.com]

Yair Zaslavsky has submitted this change and it was merged.

Change subject: engine :  User who can't manipulate users, can add user if he has manipulate_permission action group.
......................................................................


engine :  User who can't manipulate users, can add user if he has manipulate_permission action group.

When user has manipulate_permission action group,
and doesn't have manipulate_users action group the user
should not be able to add new users to the system

Change-Id: Ib62e1c051bc78b8a9ec0f32e6ba4eb9484242591
Bug-Url: https://bugzilla.redhat.com/923100
Signed-off-by: Ravi Nori <rnori at redhat.com>
---
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/AddPermissionCommand.java
1 file changed, 14 insertions(+), 2 deletions(-)

Approvals:
  Yair Zaslavsky: Verified; Looks good to me, approved



-- 
To view, visit http://gerrit.ovirt.org/17593
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ib62e1c051bc78b8a9ec0f32e6ba4eb9484242591
Gerrit-PatchSet: 4
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ravi Nori <rnori at redhat.com>
Gerrit-Reviewer: Oved Ourfali <oourfali at redhat.com>
Gerrit-Reviewer: Ravi Nori <rnori at redhat.com>
Gerrit-Reviewer: Yair Zaslavsky <yzaslavs at redhat.com>
Gerrit-Reviewer: oVirt Jenkins CI Server