From: Tony Mack <tmack@cs.princeton.edu>
Date: Mon, 15 Jun 2009 21:49:58 +0000 (+0000)
Subject: add an extra condition in verify_object_pemission
X-Git-Tag: sfa-0.9-0@14641~279
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=76d09a2727bbc97294debb9cd0905900f09f60ab;p=sfa.git

add an extra condition in verify_object_pemission
---

diff --git a/geni/util/auth.py b/geni/util/auth.py
index f1904328..723a8b11 100644
--- a/geni/util/auth.py
+++ b/geni/util/auth.py
@@ -12,6 +12,7 @@ from geni.util.hierarchy import Hierarchy
 from geni.util.rights import RightList
 from geni.util.genitable import *
 from geni.util.config import *
+from geni.util.misc import *
 
 class Auth:
     """
@@ -140,6 +141,9 @@ class Auth:
             return
         if name.startswith(object_hrn + "."):
             return
+        if name.startswith(get_authority(name)):
+            return
+    
         raise PermissionError(name)
 
     def determine_user_rights(self, src_cred, record):