Notice: In order to edit this ticket you need to be either: a Product Owner, The owner or the reporter of the ticket, or, in case of a Task not yet assigned, a team_member"

Task #8194 (closed)

Opened 7 years ago

Closed 7 years ago

Last modified 7 years ago

Prevent cross-group linking with omero.group:-1

Reported by: jamoore Owned by: jamoore
Priority: blocker Milestone: OMERO-4.4
Component: Security Version: n.a.
Keywords: n.a. Cc: cneves
Resources: n.a. Referenced By: n.a.
References: n.a. Remaining Time: 0.0d
Sprint: 2012-03-13 (10)

Description

#8097 opened a whole in the group permissions logic allowing objects to be linked across groups (a major no-no according to #1434).

Change History (2)

comment:1 Changed 7 years ago by jmoore

  • Remaining Time changed from 1 to 0
  • Resolution set to fixed
  • Status changed from new to closed

Done and pushed to branch (3529-callcontext)

comment:2 Changed 7 years ago by jmoore <josh@…>

(In [617e6e220bdffc9efc30978d2d0bc1058866088d/ome.git] on branch develop) Fix cross-linking with group=-1 (Fix #8194)

Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.3.13-PRO © 2008-2011 Agilo Software all rights reserved (this page was served in: 0.77628 sec.)

© 2000-2014 University of Dundee & Open Microscopy Environment. Creative Commons Attribution 3.0 Unported License
OME source code is available under the GNU General public license or through commercial license from Glencoe Software

We're Hiring!