Michael Pasternak has submitted this change and it was merged.

Change subject: restapi: Disable Get Groups For Non-Admin User
......................................................................


restapi: Disable Get Groups For Non-Admin User

Getting Groups for non-admin user is wrongly implemented. It currently returns -
instead of all groups which the user is authorized to see - exactly one User 
entity,
(the user himself). Needless to say this is very far from the intended result.

Until new implementation will be avaliable, I am removing this wrong 
implementation.
For now the outcome will now be: user will fail due to insufficient permission.

Change-Id: I932a197271ccfa52418276ec4ddfb4c5db95e0a0
Signed-off-by: Ori Liel <[email protected]>
---
M 
backend/manager/modules/restapi/jaxrs/src/main/java/org/ovirt/engine/api/restapi/resource/BackendGroupsResource.java
1 file changed, 1 insertion(+), 8 deletions(-)

Approvals:
  Michael Pasternak: Verified; Looks good to me, approved


--
To view, visit http://gerrit.ovirt.org/14894
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I932a197271ccfa52418276ec4ddfb4c5db95e0a0
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Ori Liel <[email protected]>
Gerrit-Reviewer: Michael Pasternak <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches

Reply via email to