shaba/one
1
0
Fork 0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-18 02:50:09 +03:00
Code Releases Wiki Activity

bug: Users can now acces their own information and change passwd

Browse Source
This commit is contained in:
Ruben S. Montero 2011-07-11 17:20:10 +02:00
parent 75bcc46dd7
commit 5bef4fd900
2 changed files with 16 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
src/authm/AuthManager.cc
View File

@ -82,15 +82,20 @@ void AuthRequest::add_auth(Object ob,
gid == GroupPool::ONEADMIN_ID || gid == GroupPool::ONEADMIN_ID ||
// User is the owner of the object, for certain operations // User is the owner of the object, for certain operations
( owner == uid && ( owner == uid &&
( op == DELETE || op == USE || op == MANAGE || ( op == DELETE || op == USE || op == MANAGE ||
op == INFO || op == INSTANTIATE ) op == INFO || op == INSTANTIATE )
) || ) ||
// Object is public and user is in its group, for certain operations // Object is public and user is in its group, for certain operations
( pub && ( gid == ob_gid ) && ( pub && ( gid == ob_gid ) &&
(op == USE || op == INSTANTIATE || op == INFO ) && ( op == USE || op == INSTANTIATE || op == INFO ) &&
(ob == NET || ob == IMAGE || ob == TEMPLATE) ( ob == NET || ob == IMAGE || ob == TEMPLATE)
) ||
// User can show and MANAGE (change passwd) their own information
( uid == ob_id_int && ob == USER &&
( op == INFO || op == MANAGE )
) )
) )
{ {

10
src/rm/RequestManagerInfo.cc
View File

@ -28,11 +28,6 @@ void RequestManagerInfo::request_execute(xmlrpc_c::paramList const& paramList,
PoolObjectSQL * object; PoolObjectSQL * object;
string str; string str;
if ( basic_authorization(oid, att) == false )
{
return;
}
if ( oid == -1 ) if ( oid == -1 )
{ {
if ( auth_object == AuthRequest::USER ) if ( auth_object == AuthRequest::USER )
@ -45,6 +40,11 @@ void RequestManagerInfo::request_execute(xmlrpc_c::paramList const& paramList,
} }
} }
if ( basic_authorization(oid, att) == false )
{
return;
}
object = pool->get(oid,true); object = pool->get(oid,true);
if ( object == 0 ) if ( object == 0 )