Skip to content

Commit 00d8638

Browse files
cm-env override (#4350)
1 parent 9a1d738 commit 00d8638

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

api/restHandler/ConfigMapRestHandler.go

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -274,10 +274,13 @@ func (handler ConfigMapRestHandlerImpl) CMEnvironmentFetchForEdit(w http.Respons
274274
common.WriteJsonResp(w, fmt.Errorf("unauthorized user"), "Unauthorized User", http.StatusForbidden)
275275
return
276276
}
277-
object = handler.enforcerUtil.GetTeamEnvRBACNameByAppId(appId, envId)
278-
if ok = handler.enforcer.Enforce(token, casbin.ResourceJobsEnv, casbin.ActionGet, object); !ok {
279-
common.WriteJsonResp(w, fmt.Errorf("unauthorized user"), "Unauthorized User", http.StatusForbidden)
280-
return
277+
object = handler.enforcerUtil.GetEnvRBACNameByAppId(appId, envId)
278+
object2 := handler.enforcerUtil.GetTeamEnvRBACNameByAppId(appId, envId)
279+
if ok := handler.enforcer.Enforce(token, casbin.ResourceEnvironment, casbin.ActionGet, object); !ok {
280+
if ok2 := handler.enforcer.Enforce(token, casbin.ResourceJobsEnv, casbin.ActionGet, object2); !ok2 {
281+
common.WriteJsonResp(w, fmt.Errorf("unauthorized user"), "Unauthorized User", http.StatusForbidden)
282+
return
283+
}
281284
}
282285

283286
name := vars["name"]

0 commit comments

Comments
 (0)