I've just created a new issue for that.

https://github.com/orientechnologies/orientdb/issues/1980

Lvc@



On 20 January 2014 13:40, Luca Garulli <[email protected]> wrote:

> Hi Claudio,
> this is a bug: that code should follow the inheritance path. Would you
> like to send us a Pull Req?
>
> Thanks in advance,
> Lvc@
>
>
>
> On 19 January 2014 14:45, Claudio <[email protected]> wrote:
>
>> Hi guys,
>> I'm working with the record security level feature and I'm facing a
>> problem related to the inherited roles.
>> At this moment in the _allow* fields, OrientDB stores the OIdentity RIDs
>> of both OUser and ORole records that have access to a certain record.
>> My problem is that if I have a Role that inherits by another one, it does
>> not inherit the record permissions too.
>>
>> I don't know if this behaviour is "by design" or if there is the
>> possibility to patch this feature.
>> In this case I found that the problem is in lines 128-135 of the
>> OSecurityShared.java (OrientDB 1.6.3) file that don't check the permissions
>> of the parent roles.
>>
>> WDYT?
>>
>> Thanks
>>
>> --
>>
>> ---
>> You received this message because you are subscribed to the Google Groups
>> "OrientDB" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected].
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>
>

-- 

--- 
You received this message because you are subscribed to the Google Groups 
"OrientDB" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to