Project

General

Profile

Actions
Copy link

Task #3075

closed

Idea #2873: Permission links are owned by root; ability to lookup/modify is determined by current user permission on "head" object

Review 2873-permission-links-ownership

Added by Tim Pierce over 10 years ago. Updated over 10 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Tom Clegg
Target version:
2014-07-16 Sprint

Description

Changes at 975b191:

Callbacks to force permission link ownership to system_user_uuid.

The before_save callbacks ArvadosModel.ensure_owner_uuid_is_permitted and Link.permission_to_attach_to_objects now test links to see if the current user has permission to manage the head_uuid of the link.

Actions
Copy link

Also available in: Atom PDF