Project

General

Profile

Actions

Task #3075

closed

Idea #2873: Permission links are owned by root; ability to lookup/modify is determined by current user permission on "head" object

Review 2873-permission-links-ownership

Added by Tim Pierce almost 10 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Target version:

Description

Changes at 975b191:

Callbacks to force permission link ownership to system_user_uuid.

The before_save callbacks ArvadosModel.ensure_owner_uuid_is_permitted and Link.permission_to_attach_to_objects now test links to see if the current user has permission to manage the head_uuid of the link.

Actions #1

Updated by Tom Clegg almost 10 years ago

  • Status changed from New to In Progress
Actions #2

Updated by Tom Clegg almost 10 years ago

  • Description updated (diff)
  • Assigned To set to Tom Clegg
Actions #3

Updated by Tom Clegg almost 10 years ago

  • Assigned To changed from Tom Clegg to Tim Pierce
Actions #4

Updated by Tim Pierce almost 10 years ago

  • Assigned To changed from Tim Pierce to Tom Clegg
  • Estimated time set to 1.00 h
  • Remaining (hours) set to 1.0
Actions #5

Updated by Tom Clegg over 9 years ago

  • Assigned To changed from Tom Clegg to Tim Pierce
Actions #6

Updated by Tim Pierce over 9 years ago

  • Assigned To changed from Tim Pierce to Tom Clegg
Actions #7

Updated by Tom Clegg over 9 years ago

  • Assigned To changed from Tom Clegg to Tim Pierce
Actions #8

Updated by Tim Pierce over 9 years ago

  • Assigned To changed from Tim Pierce to Tom Clegg
Actions #9

Updated by Tim Pierce over 9 years ago

  • Status changed from In Progress to Resolved
  • Remaining (hours) changed from 1.0 to 0.0
Actions

Also available in: Atom PDF