X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/6403b8728d3120d6cb22583b3963d2a030e88aa3..d9f8f46ccd5a418dcf7b5f43aeb59cd2d9d424ba:/services/api/app/models/link.rb diff --git a/services/api/app/models/link.rb b/services/api/app/models/link.rb index e319190534..d9b8f6f09b 100644 --- a/services/api/app/models/link.rb +++ b/services/api/app/models/link.rb @@ -72,15 +72,17 @@ class Link < ArvadosModel def name_links_are_obsolete if link_class == 'name' - errors.add('name', 'Name links are obsolete') + errors.add('name', 'Name links are obsolete') + false else true end end # A user is permitted to create, update or modify a permission link - # if and only if they have "manage" permission on the destination - # object. + # if and only if they have "manage" permission on the object + # indicated by the permission link's head_uuid. + # # All other links are treated as regular ArvadosModel objects. # def ensure_owner_uuid_is_permitted @@ -95,14 +97,4 @@ class Link < ArvadosModel end end - # A user can give all other users permissions on projects. - def skip_uuid_read_permission_check - skipped_attrs = super - if link_class == "permission" and - (ArvadosModel.resource_class_for_uuid(head_uuid) == Group) and - (ArvadosModel.resource_class_for_uuid(tail_uuid) == User) - skipped_attrs << "tail_uuid" - end - skipped_attrs - end end