Oved Ourfali has posted comments on this change.

Change subject: engine : query execution failed due to insufficient permissions
......................................................................


Patch Set 1:

(1 comment)

http://gerrit.ovirt.org/#/c/34517/1/backend/manager/modules/common/src/main/java/org/ovirt/engine/core/common/queries/VdcQueryType.java
File 
backend/manager/modules/common/src/main/java/org/ovirt/engine/core/common/queries/VdcQueryType.java:

Line 282:     // oVirt
Line 283:     GetoVirtISOs,
Line 284: 
Line 285:     // Async Tasks
Line 286:     GetTasksStatusesByTasksIDs(VdcQueryAuthType.User),
That means we expose all tasks to everyone (admin + users). not sure that's the 
right approach.
Line 287: 
Line 288:     // Quota
Line 289:     GetQuotaByStoragePoolId,
Line 290:     GetQuotaByQuotaId,


-- 
To view, visit http://gerrit.ovirt.org/34517
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: I11adfe9c49d1e57ecc88d1828ed63884016c33e8
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ravi Nori <rn...@redhat.com>
Gerrit-Reviewer: Juan Hernandez <juan.hernan...@redhat.com>
Gerrit-Reviewer: Oved Ourfali <oourf...@redhat.com>
Gerrit-Reviewer: Ravi Nori <rn...@redhat.com>
Gerrit-Reviewer: automat...@ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server
Gerrit-HasComments: Yes
_______________________________________________
Engine-patches mailing list
Engine-patches@ovirt.org
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to