3171: Do not follow permission graph through a User, unless permission on the User...
authorTom Clegg <tom@curoverse.com>
Fri, 22 Aug 2014 00:16:47 +0000 (20:16 -0400)
committerTom Clegg <tom@curoverse.com>
Fri, 22 Aug 2014 00:16:47 +0000 (20:16 -0400)
commit42a27c7cabdacb00bd5a9ba06443c8a72322738b
treefc66b8632a62b9df8b92a6ae706c49f0bbb9431e
parent779547997857b04c27e5df52f70d527fcaa7a551
3171: Do not follow permission graph through a User, unless permission on the User is can_manage. Restore usual permission model to user lookups. Add tests.
services/api/app/controllers/arvados/v1/users_controller.rb
services/api/app/models/link.rb
services/api/app/models/user.rb
services/api/test/unit/permission_test.rb