16007: Only users and roles can be granted permission
authorPeter Amstutz <peter.amstutz@curii.com>
Mon, 1 Jun 2020 18:59:51 +0000 (14:59 -0400)
committerPeter Amstutz <peter.amstutz@curii.com>
Wed, 17 Jun 2020 17:57:25 +0000 (13:57 -0400)
commit2627f837f2564de2708947dda87f1b4985580adb
tree3d72510f5c3026377a84716838cfc16435c5c859
parent17745128f72eeaef62ea2d367ec316502107f272
16007: Only users and roles can be granted permission

Permission link tail_uuid must be a user or group_class role.

Also disallow modifying permission links.

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz@curii.com>
services/api/app/models/arvados_model.rb
services/api/app/models/link.rb
services/api/test/fixtures/groups.yml
services/api/test/integration/permissions_test.rb
services/api/test/unit/group_test.rb
services/api/test/unit/permission_test.rb