Damans227 opened a new pull request, #14318:
URL: https://github.com/apache/cloudstack/pull/14318

   Reordering a project role's rules looked up each rule id on its own and 
never checked that it belonged to the project or role the call was made for. 
This makes reorder and single rule updates use the same lookup, which rejects 
rule ids from another project, and reorder also rejects rules from another role 
in the same project.
   
   ### Test:
   
   Unit tests added for a rule from another project, a rule from another role, 
and a normal reorder.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to