current_user_rights now take correctly real groups in account

pboard/pboard/controllers/root.py

@@ -143,10 +143,7 @@ class RootController(BaseController):
 
         user_specific_group_rights = pld.PODStaticController.getUserDedicatedGroupRightsOnNode(loCurrentNode)
 
-        current_user_rights = None
-        for right in user_specific_group_rights:
-            if right.group_id == -loCurrentUser.user_id:
-                current_user_rights = right
+        current_user_rights = pld.PODStaticController.DIRTY_get_rights_on_node(loCurrentUser.user_id, loCurrentNode.node_id)
 
         return dict(
             current_user=loCurrentUser,

pboard/pboard/lib/dbapi.py

@@ -153,6 +153,19 @@ class PODStaticController(object):
 
     return group_rights_on_node
 
+  @classmethod
+  def DIRTY_get_rights_on_node(self, user_id, node_id):
+      rights = pbm.DBSession\
+              .execute("""select max(rights) as rights
+                      from pod_user_group
+                      natural join pod_group_node
+                      where node_id=:node_id
+                      and user_id=:user_id""", {"node_id":node_id, "user_id":user_id})\
+              .fetchone()
+      r = pbmd.DIRTY_GroupRightsOnNode()
+      r.rights = rights[0]
+      return r
+
 
 
 class PODUserFilteredApiController(object):