X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/8f46cb4ad6974b0fc54acc9c9f16fbea7573d75d..9fd9565ea0411b43943076add49d5bca2da8e379:/services/api/app/models/link.rb diff --git a/services/api/app/models/link.rb b/services/api/app/models/link.rb index 808489e1c2..d9b8f6f09b 100644 --- a/services/api/app/models/link.rb +++ b/services/api/app/models/link.rb @@ -80,8 +80,9 @@ class Link < ArvadosModel end # A user is permitted to create, update or modify a permission link - # if and only if they have "manage" permission on the destination - # object. + # if and only if they have "manage" permission on the object + # indicated by the permission link's head_uuid. + # # All other links are treated as regular ArvadosModel objects. # def ensure_owner_uuid_is_permitted @@ -96,14 +97,4 @@ class Link < ArvadosModel end end - # A user can give all other users permissions on projects. - def skip_uuid_read_permission_check - skipped_attrs = super - if link_class == "permission" and - (ArvadosModel.resource_class_for_uuid(head_uuid) == Group) and - (ArvadosModel.resource_class_for_uuid(tail_uuid) == User) - skipped_attrs << "tail_uuid" - end - skipped_attrs - end end