Comment 11 for bug 1654598

Revision history for this message
Tom Barron (tpb) wrote :

As agreed in today's meeting with ganso, vponmaryov, bswartz, and myself the last patch will be extended to do a similar policy check when showing or listing export locations for share intances. With default policy there would be no issue with share instances since with that policy only admin can view share intances anyways. However, a check would need to come into play if a cloud admin made policy changes to allow normal users to see share instances: one should in that case be able to see export locations for instances where one has rights to view the share and its instances, but not for instances of non-public shares belonging to others.

Attaching new patch set for consideration, called 'Do-policy-check-when-getting-export-locations-for-shares-and-share-instances.patch'.