From: Tony Mack <tmack@cs.princeton.edu>
Date: Mon, 4 Jan 2010 20:37:03 +0000 (+0000)
Subject: pi can get a slice's cred without being in the slice itself
X-Git-Tag: sfa-0.9-7~12
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=7493289a3ef6b00a945489140b6577fdf7651c9d;p=sfa.git

pi can get a slice's cred without being in the slice itself
---

diff --git a/sfa/trust/auth.py b/sfa/trust/auth.py
index 43a81f30..0d578715 100644
--- a/sfa/trust/auth.py
+++ b/sfa/trust/auth.py
@@ -231,7 +231,8 @@ class Auth:
 
         if type=="slice":
             researchers = record.get("researcher", [])
-            if (caller_hrn in researchers):
+            pis = record.get("PI", [])
+            if (caller_hrn in researchers + pis):
                 rl.add("refresh")
                 rl.add("embed")
                 rl.add("bind")