From 8ab98660dfc1973cced8b1deed355336cf4c5e64 Mon Sep 17 00:00:00 2001
From: Tom Clegg <tom@curoverse.com>
Date: Wed, 21 May 2014 20:20:54 -0400
Subject: [PATCH] 2760: Refresh permission cache after changing group uuid or
 owner_uuid.

---
 services/api/app/models/group.rb | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/services/api/app/models/group.rb b/services/api/app/models/group.rb
index f05571651d..d380244131 100644
--- a/services/api/app/models/group.rb
+++ b/services/api/app/models/group.rb
@@ -5,6 +5,8 @@ class Group < ArvadosModel
   include KindAndEtag
   include CommonApiTemplate
   include CanBeAnOwner
+  after_create :invalidate_permissions_cache
+  after_update :maybe_invalidate_permissions_cache
 
   api_accessible :user, extend: :common do |t|
     t.add :name
@@ -12,4 +14,18 @@ class Group < ArvadosModel
     t.add :description
     t.add :writable_by
   end
+
+  def maybe_invalidate_permissions_cache
+    if uuid_changed? or owner_uuid_changed?
+      # This can change users' permissions on other groups as well as
+      # this one.
+      invalidate_permissions_cache
+    end
+  end
+
+  def invalidate_permissions_cache
+    # Ensure a new group can be accessed by the appropriate users
+    # immediately after being created.
+    User.invalidate_permissions_cache
+  end
 end
-- 
2.30.2