From e0f045ddedd05716bd813f801654308d3bbd2dd0 Mon Sep 17 00:00:00 2001 From: Peter Amstutz Date: Thu, 4 May 2023 10:34:48 -0400 Subject: [PATCH] 20470: Disallow selecting manifest_text on group contents Because it currently won't be signed. Arvados-DCO-1.1-Signed-off-by: Peter Amstutz --- .../api/app/controllers/arvados/v1/groups_controller.rb | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/services/api/app/controllers/arvados/v1/groups_controller.rb b/services/api/app/controllers/arvados/v1/groups_controller.rb index 4dadaf4e2b..48ae687ff9 100644 --- a/services/api/app/controllers/arvados/v1/groups_controller.rb +++ b/services/api/app/controllers/arvados/v1/groups_controller.rb @@ -297,6 +297,12 @@ class Arvados::V1::GroupsController < ApplicationController where_conds = where_conds.merge(group_class: ["project","filter"]) end + # Make signed manifest_text not selectable because controller + # currently doesn't know to sign it. + if @select + @select = @select - ["manifest_text"] + end + @filters = request_filters.map do |col, op, val| if !col.index('.') [col, op, val] -- 2.30.2