Display parent tenant only when it is allowed by RBAC

ManageIQ · Nov 28, 2016 · c98a613 · c98a613
1 parent 578f896
commit c98a613
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/app/models/tenant.rb b/app/models/tenant.rb
@@ -320,6 +320,10 @@ def build_tenant_tree
     data_tenant
   end
 
+  def allowed?
+    Rbac::Filterer.filtered_object(self).present?
+  end
+
   private
 
   # when a root tenant has an attribute with a nil value,

diff --git a/app/views/ops/_rbac_tenant_details.html.haml b/app/views/ops/_rbac_tenant_details.html.haml
@@ -15,7 +15,7 @@
       .col-md-8
         = h(@tenant.description)
     - parent = @tenant.parent
-    - if parent
+    - if parent && parent.allowed?
       .form-group
         %label.control-label.col-md-2
           = _("Parent")