Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] [API] The user just can be view owner project in the default. #15771

Closed
3 tasks done
silentxingtian opened this issue Mar 27, 2024 · 0 comments · Fixed by #15772
Closed
3 tasks done

[Bug] [API] The user just can be view owner project in the default. #15771

silentxingtian opened this issue Mar 27, 2024 · 0 comments · Fixed by #15772
Assignees
Labels
bug Something isn't working
Milestone

Comments

@silentxingtian
Copy link
Contributor

silentxingtian commented Mar 27, 2024

Search before asking

  • I had searched in the issues and found no similar issues.

What happened

The user can be view other user project used by current vulnerability.

What you expected to happen

First:use the admin user create a project
Second:the normal user view projects, can't looked project
Third:get the permission and view the project

How to reproduce

call it by interface

Anything else

No response

Version

dev

Are you willing to submit PR?

  • Yes I am willing to submit a PR!

Code of Conduct

@silentxingtian silentxingtian added bug Something isn't working Waiting for reply Waiting for reply labels Mar 27, 2024
silentxingtian pushed a commit to silentxingtian/dolphinscheduler that referenced this issue Mar 27, 2024
silentxingtian pushed a commit to silentxingtian/dolphinscheduler that referenced this issue Mar 27, 2024
@qingwli qingwli added this to the 3.2.2 milestone Mar 27, 2024
@qingwli qingwli linked a pull request Mar 27, 2024 that will close this issue
silentxingtian pushed a commit to silentxingtian/dolphinscheduler that referenced this issue Mar 27, 2024
silentxingtian pushed a commit to silentxingtian/dolphinscheduler that referenced this issue Mar 27, 2024
@SbloodyS SbloodyS removed the Waiting for reply Waiting for reply label Mar 27, 2024
silentxingtian pushed a commit to silentxingtian/dolphinscheduler that referenced this issue Mar 27, 2024
@davidzollo davidzollo changed the title [Bug] [Surface Vulnerability] The user just can be view owner project in the default. [Bug] [API] The user just can be view owner project in the default. Mar 27, 2024
silentxingtian pushed a commit to silentxingtian/dolphinscheduler that referenced this issue Mar 27, 2024
davidzollo pushed a commit that referenced this issue Mar 27, 2024
* repair the bug #15771 by call the interface.

* Fix the bug by call the interface(#15771)

* Fix the grant project,datasource,udf bug (#15771)

* add Unit Test for modified (#15771)

* add Unit Test for UDF (#15771)

* [Fix] add Unit Test and grant Permission modify(#15771)

---------

Co-authored-by: liuw529 <liuw529@chinaunicom.cn>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants