Debug log when returned projects are filtered out due to permissions.

This commit is contained in:
Sybren A. Stüvel 2016-06-15 13:02:01 +02:00
parent ba79a30846
commit bcadfcd6f5

View File

@ -383,9 +383,15 @@ def before_returning_project_permissions(response):
def before_returning_project_resource_permissions(response):
# Return only those projects the user has access to.
allow = [project for project in response['_items']
allow = []
for project in response['_items']:
if authorization.has_permissions('projects', project,
'GET', append_allowed_methods=True)]
'GET', append_allowed_methods=True):
allow.append(project)
else:
log.debug('User %s requested project %s, but has no access to it; filtered out.',
g.get('current_user', {}).get('user_id'), project['_id'])
response['_items'] = allow