From d1986d4db238e1750888e01c4e7bbe8d45266461 Mon Sep 17 00:00:00 2001 From: Kyle Ellrott Date: Thu, 14 Aug 2014 13:38:55 -0700 Subject: [PATCH] Checking security before creating the HDA --- lib/galaxy/workflow/run_request.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/galaxy/workflow/run_request.py b/lib/galaxy/workflow/run_request.py index 67001ad83cc..3a9a475eba2 100644 --- a/lib/galaxy/workflow/run_request.py +++ b/lib/galaxy/workflow/run_request.py @@ -195,8 +195,8 @@ def build_workflow_run_config( trans, workflow, payload ): #could be found amoung fereration partners message = "Input cannot find UUID: %s." % input_id raise exceptions.RequestParameterInvalidException( message ) + assert trans.user_is_admin() or trans.app.security_agent.can_access_dataset( trans.get_current_user_roles(), dataset ) content = history.add_dataset(dataset) - assert trans.user_is_admin() or trans.app.security_agent.can_access_dataset( trans.get_current_user_roles(), content.dataset ) elif input_source == 'hdca': content = app.dataset_collections_service.get_dataset_collection_instance( trans,