storyboard/storyboard/db/api
Adam Coldrick 1080289891 Check story permissions when populating automatic worklists
Currently, when populating the items of an automatic worklist,
the permissions set on private stories is not taken into account.

This commit fixes this issue by filtering out stories and tasks
that the user shouldn't be able to see when finding the list
of stories and tasks which match the worklist's filters.

Change-Id: If37be62890db913b428af4e6a94ee21754c6ac56
2017-10-04 20:20:03 +01:00
..
__init__.py DB api refactoring 2014-03-26 14:39:40 +04:00
access_tokens.py One-To-One relationship for Access and Refresh Tokens 2015-04-13 17:44:35 -07:00
auth_codes.py Split auth in api and change user_tokens 2015-03-12 14:47:04 +03:00
base.py Allow stories and tasks to be filtered by boards/worklists containing them 2017-04-06 13:08:54 +01:00
boards.py switch from incubated gettextutils to oslo.i18n 2016-11-07 08:47:47 -05:00
branches.py switch from incubated gettextutils to oslo.i18n 2016-11-07 08:47:47 -05:00
comments.py Store history of a comment when editing 2016-06-23 15:11:59 +00:00
due_dates.py switch from incubated gettextutils to oslo.i18n 2016-11-07 08:47:47 -05:00
milestones.py Added milestones 2015-03-02 11:11:59 +01:00
project_groups.py switch from incubated gettextutils to oslo.i18n 2016-11-07 08:47:47 -05:00
projects.py Avoid false positives when filtering projects by subscriber 2016-05-23 12:29:44 +00:00
refresh_tokens.py One-To-One relationship for Access and Refresh Tokens 2015-04-13 17:44:35 -07:00
stories.py Allow stories and tasks to be filtered by boards/worklists containing them 2017-04-06 13:08:54 +01:00
story_tags.py Allow tags to be filtered by name 2016-06-17 11:36:17 +01:00
story_types.py Added story types 2015-03-30 14:34:35 +03:00
subscription_events.py Added a subscription_events table & subscription hander 2014-08-19 08:44:47 -07:00
subscriptions.py Send notifications to subscribers for worklists 2016-09-02 11:30:41 +00:00
tasks.py Allow stories and tasks to be filtered by boards/worklists containing them 2017-04-06 13:08:54 +01:00
teams.py switch from incubated gettextutils to oslo.i18n 2016-11-07 08:47:47 -05:00
timeline_events.py Fix interaction with boards and worklists 2016-10-24 10:14:21 +00:00
user_tokens.py One-To-One relationship for Access and Refresh Tokens 2015-04-13 17:44:35 -07:00
users.py Allow users to be filtered by openid and email 2016-06-23 22:26:51 +01:00
worklists.py Check story permissions when populating automatic worklists 2017-10-04 20:20:03 +01:00