Comment 3 for bug 1056601

Revision history for this message
Vish Ishaya (vishvananda) wrote :

Johannes: elevating every context was a temporary workaround so we didn't have to audit every call and figure out which db calls needed to be admin. I think the admin checking in the db layer has likely outlived its usefulness. It probably should be converted to policy checking or removed completely.