| commit | cd66dfa7b5e944c75d8e89199717845ef91ed3aa | |
| author | Robin Sonefors <robin.sonefors@op5.com> | |
| Thu, 19 Jun 2014 07:57:43 +0000 (19 09:57 +0200) | ||
| committer | Robin Sonefors <robin.sonefors@op5.com> | |
| Thu, 19 Jun 2014 08:01:40 +0000 (19 10:01 +0200) | ||
| tree | b70243e03523de17e16c203b864d9126fd665400 | treesnapshot (tar.gz zip) |
| parent | 250c1fcbcfab38ad0071c0287ea699048b1b26d2 | commitdiff |
recurringdowntime: Let limited users see their recurring downtimes
The limited authorization code accidentally based its decisions on the
full pool, instead of the empty pool, which means that the number of
objects in the downtime the user is allowed to see, plus all the objects
the user is allowed to see, had to match the actual number of objects in
the downtime.
Hence, it was possible for limited to be allowed to see schedules, but
only if they weren't supposed to see them.
This resolves bug #8807.
Change-Id: Ibdc96d97a7a5fa77d290ddd03a8e4b36bfbfcdb5
Signed-off-by: Robin Sonefors <robin.sonefors@op5.com>
The limited authorization code accidentally based its decisions on the
full pool, instead of the empty pool, which means that the number of
objects in the downtime the user is allowed to see, plus all the objects
the user is allowed to see, had to match the actual number of objects in
the downtime.
Hence, it was possible for limited to be allowed to see schedules, but
only if they weren't supposed to see them.
This resolves bug #8807.
Change-Id: Ibdc96d97a7a5fa77d290ddd03a8e4b36bfbfcdb5
Signed-off-by: Robin Sonefors <robin.sonefors@op5.com>
| modules/orm/models/recurringdowntimeset.php | diffblobblamehistory |