do not render attributes of non-owned objects with x-editable

diff --git a/apps/workbench/app/models/arvados_base.rb b/apps/workbench/app/models/arvados_base.rb
index baceae968540a8da20fa6c9dc0ee580a85ef0d6e..172c91d4bc00a3eb7aca6dda2d2e6b3aa813ef28 100644 (file)
--- a/apps/workbench/app/models/arvados_base.rb
+++ b/apps/workbench/app/models/arvados_base.rb
@@ -216,7 +216,7 @@ class ArvadosBase < ActiveRecord::Base
     elsif "uuid owner".index(attr.to_s)
       current_user and current_user.is_admin
     else
-      true
+      current_user and current_user.uuid == owner
     end
   end