You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Currently, users can call get/bulkGet methods by data source ID for global data sources (not assigned to any workspace). This poses a security risk as users can potentially access and operate on global data sources that they should not have access to.
Describe the solution you'd like
I would like to add permission validation in the saved objects client wrapper's get or bulkGet methods. These methods should throw an error when a user attempts to operate on global data sources.
Is your feature request related to a problem? Please describe.
Currently, users can call get/bulkGet methods by data source ID for global data sources (not assigned to any workspace). This poses a security risk as users can potentially access and operate on global data sources that they should not have access to.
Describe the solution you'd like
I would like to add permission validation in the saved objects client wrapper's get or bulkGet methods. These methods should throw an error when a user attempts to operate on global data sources.
Describe alternatives you've considered
N/A
Additional context
#4944
The text was updated successfully, but these errors were encountered: