Oved Ourfali has uploaded a new change for review.

Change subject: 848434 - In UserPortal user can only see his own permissions on 
the objects (#848434)
......................................................................

848434 - In UserPortal user can only see his own permissions on the objects 
(#848434)

https://bugzilla.redhat.com/show_bug.cgi?id=848434

This patch changes the logic of getting direct permissions on an object,
to show all permissions to a user which has any permission on the
object.

Change-Id: Ic7a54ab2de26b607b9e79dc678f0bb45b700e343
Signed-off-by: Oved Ourfali <[email protected]>
---
M backend/manager/dbscripts/multi_level_administration_sp.sql
1 file changed, 15 insertions(+), 2 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-engine refs/changes/46/7246/1

diff --git a/backend/manager/dbscripts/multi_level_administration_sp.sql 
b/backend/manager/dbscripts/multi_level_administration_sp.sql
index b8919f1..a41d599 100644
--- a/backend/manager/dbscripts/multi_level_administration_sp.sql
+++ b/backend/manager/dbscripts/multi_level_administration_sp.sql
@@ -517,6 +517,21 @@
    AS $procedure$
 BEGIN
    RETURN QUERY SELECT *
+   FROM permissions_view
+   WHERE object_id = v_id
+   AND   (NOT v_is_filtered OR EXISTS (SELECT 1
+                                       FROM   
GetUserPermissionsByEntityId(v_id, v_user_id, v_is_filtered)));
+END; $procedure$
+LANGUAGE plpgsql;
+
+
+Create or replace FUNCTION GetUserPermissionsByEntityId(v_id UUID, v_user_id 
UUID, v_is_filtered BOOLEAN)
+RETURNS SETOF permissions_view
+    -- SET NOCOUNT ON added to prevent extra result sets from
+    -- interfering with SELECT statements.
+   AS $procedure$
+BEGIN
+   RETURN QUERY SELECT *
    FROM permissions_view p
    WHERE object_id = v_id
    AND   (NOT v_is_filtered OR EXISTS (SELECT 1
@@ -525,8 +540,6 @@
                                        AND    u.user_id       = v_user_id));
 END; $procedure$
 LANGUAGE plpgsql;
-
-
 
 
 


--
To view, visit http://gerrit.ovirt.org/7246
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic7a54ab2de26b607b9e79dc678f0bb45b700e343
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Oved Ourfali <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to