yujunjun/OpenMetadata
1
0
Fork 0
mirror of https://github.com/open-metadata/OpenMetadata.git synced 2025-07-14 04:29:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Minor: skip domain check for bots and admin (#18734)

Browse Source
This commit is contained in:
Sriharsha Chintalapani 2024-11-22 10:41:42 -08:00 committed by GitHub
parent 532efbe5ab
commit 04659132b7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
openmetadata-service/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java
View File

@ -84,7 +84,9 @@ public class PolicyEvaluator {
@NonNull ResourceContextInterface resourceContext, @NonNull ResourceContextInterface resourceContext,
OperationContext operationContext) { OperationContext operationContext) {
// If the Resource Does not belong to any Domain, then evaluate via other permissions // If the Resource Does not belong to any Domain, then evaluate via other permissions
if (!nullOrEmpty(resourceContext.getDomain())) { if (!nullOrEmpty(resourceContext.getDomain())
&& !subjectContext.isAdmin()
&& !subjectContext.isBot()) {
EntityReference domain = resourceContext.getDomain(); EntityReference domain = resourceContext.getDomain();
if (!subjectContext.hasDomain(domain)) { if (!subjectContext.hasDomain(domain)) {
throw new AuthorizationException( throw new AuthorizationException(