archive/pillar
0
0
Fork 0
Code Issues 42 Pull Requests Projects Releases Wiki Activity

Debug log when returned projects are filtered out due to permissions.

Browse Source
This commit is contained in:
Sybren A. Stüvel
2016-06-15 13:02:01 +02:00
parent ba79a30846
commit bcadfcd6f5
1 changed files with 9 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
pillar/application/modules/projects.py
View File

@@ -383,9 +383,15 @@ def before_returning_project_permissions(response):
def before_returning_project_resource_permissions(response): def before_returning_project_resource_permissions(response):
# Return only those projects the user has access to. # Return only those projects the user has access to.
allow = [project for project in response['_items'] allow = []
for project in response['_items']:
if authorization.has_permissions('projects', project, if authorization.has_permissions('projects', project,
'GET', append_allowed_methods=True)] 'GET', append_allowed_methods=True):
allow.append(project)
else:
log.debug('User %s requested project %s, but has no access to it; filtered out.',
g.get('current_user', {}).get('user_id'), project['_id'])
response['_items'] = allow response['_items'] = allow