1 new changeset in galaxy-central: http://bitbucket.org/galaxy/galaxy-central/changeset/7ae63fde7f78/ changeset: r5488:7ae63fde7f78 user: dan date: 2011-04-29 22:51:51 summary: Only allow a user to rerun if they have access permissions on the dataset. affected #: 1 file (246 bytes) --- a/lib/galaxy/web/controllers/tool_runner.py Fri Apr 29 15:32:04 2011 -0400 +++ b/lib/galaxy/web/controllers/tool_runner.py Fri Apr 29 16:51:51 2011 -0400 @@ -90,6 +90,9 @@ error( "Invalid value for 'id' parameter" ) # Get the dataset object data = trans.sa_session.query( trans.app.model.HistoryDatasetAssociation ).get( id ) + #only allow rerunning if user is allowed access to the dataset. + if not trans.app.security_agent.can_access_dataset( trans.get_current_user_roles(), data.dataset ): + error( "You are not allowed to access this dataset" ) # Get the associated job, if any. If this hda was copied from another, # we need to find the job that created the origial hda job_hda = data Repository URL: https://bitbucket.org/galaxy/galaxy-central/ -- This is a commit notification from bitbucket.org. You are receiving this because you have the service enabled, addressing the recipient of this email.