User Story #1388 (new)

Opened 15 months ago

Add support for "effective" UID.

Reported by: jmoore Owned by: jmoore
Priority: critical Milestone: Unscheduled
Component: General Keywords: n.a.
Cc: cxallan, atarkowska Story Points: n.a.
Sprint: n.a. Importance: n.a.
Total Remaining Time: n.a. Estimated Remaining Time: n.a.

Description

Both "sudo" and OmeroShares could use support for effective user id.

cF:

IShare is available. We had some problems with retrieving data, especially images. I would like to ask you about being careful when you are getting current user id by ...getEventContext().getCurrentUserId(). 

private Long getCurrentUserId() {
	Long shareId = getSecuritySystem().getEventContext().getCurrentShareId();
	if (shareId != null) {
		Session s = iQuery.get(Session.class, shareId);
		return s.getOwner().getId();
	}
	return getSecuritySystem().getEventContext().getCurrentUserId();

ThumbnailBean and PixelsImpl already have that method.

References

Referenced by:
  • ← Requirement (#2129): Security Improvements
Note: See TracTickets for help on using tickets. You may also have a look at Agilo extensions to the ticket.

1.2.1-PRO © 2008-2009 agile42 all rights reserved (this page was served in: 0.251906 sec.)