X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e79e5c258fe6ec542c3f2bb3c4230a5de2812b25..86b14bac0b6413dd033285a4357cc7edd05a22b3:/services/api/app/models/user.rb

diff --git a/services/api/app/models/user.rb b/services/api/app/models/user.rb
index f283ea3ef8..6e7facd5d5 100644
--- a/services/api/app/models/user.rb
+++ b/services/api/app/models/user.rb
@@ -83,7 +83,10 @@ class User < ArvadosModel
                          end
       if sufficient_perms
         # Check permission links with head_uuid pointing directly at
-        # the target object
+        # the target object. If target is a Group, this is redundant
+        # and will fail except [a] if permission caching is broken or
+        # [b] during a race condition, where a permission link has
+        # *just* been added.
         if Link.where(link_class: 'permission',
                       name: sufficient_perms,
                       tail_uuid: groups_i_can(action) + [self.uuid],