Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Workspace]Implement Permission Validation for get/bulkGet on Global Data Sources #8044

Closed
wanglam opened this issue Sep 6, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@wanglam
Copy link
Contributor

wanglam commented Sep 6, 2024

Is your feature request related to a problem? Please describe.

Currently, users can call get/bulkGet methods by data source ID for global data sources (not assigned to any workspace). This poses a security risk as users can potentially access and operate on global data sources that they should not have access to.

Describe the solution you'd like

I would like to add permission validation in the saved objects client wrapper's get or bulkGet methods. These methods should throw an error when a user attempts to operate on global data sources.

Describe alternatives you've considered

N/A

Additional context

#4944

@wanglam wanglam added the enhancement New feature or request label Sep 6, 2024
@wanglam wanglam closed this as completed Sep 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant