You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@dolphinscheduler.apache.org by GitBox <gi...@apache.org> on 2022/05/30 04:46:31 UTC
[GitHub] [dolphinscheduler] hstdream opened a new pull request, #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
hstdream opened a new pull request, #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289
[Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] hstdream commented on pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
hstdream commented on PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#issuecomment-1140726410
#10231
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] lenboo commented on a diff in pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
lenboo commented on code in PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#discussion_r884876343
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/constants/ApiFuncIdentificationConstant.java:
##########
@@ -0,0 +1,172 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.dolphinscheduler.api.constants;
+
+import org.apache.dolphinscheduler.api.enums.ExecuteType;
+import java.util.HashMap;
+import java.util.Map;
+
+
+public class ApiFuncIdentificationConstant {
+
+ public static final String ACCESS_TOKEN_MANAGE = "security:token:view";
Review Comment:
I think we should use prefix "PERMISSION_CHECK" to identify that this variable is permission check, but this is not important, we can fix it later.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] lenboo merged pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
lenboo merged PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] sonarcloud[bot] commented on pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
sonarcloud[bot] commented on PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#issuecomment-1140704532
SonarCloud Quality Gate failed. [](https://sonarcloud.io/dashboard?id=apache-dolphinscheduler&pullRequest=10289)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG) [1 Bug](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY) [0 Vulnerabilities](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY)
[](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT) [](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT) [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL) [23 Code Smells](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL)
[](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_coverage&view=list) [67.2% Coverage](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_coverage&view=list)
[](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_duplicated_lines_density&view=list) [0.6% Duplication](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_duplicated_lines_density&view=list)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] codecov-commenter commented on pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
codecov-commenter commented on PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#issuecomment-1140699956
# [Codecov](https://codecov.io/gh/apache/dolphinscheduler/pull/10289?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) Report
> Merging [#10289](https://codecov.io/gh/apache/dolphinscheduler/pull/10289?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (a3a28e6) into [dev](https://codecov.io/gh/apache/dolphinscheduler/commit/13af2adfc150e6e16ce07c5d1abeeb25f9cd9340?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (13af2ad) will **increase** coverage by `0.09%`.
> The diff coverage is `58.59%`.
```diff
@@ Coverage Diff @@
## dev #10289 +/- ##
============================================
+ Coverage 41.17% 41.26% +0.09%
- Complexity 4760 4763 +3
============================================
Files 855 856 +1
Lines 34621 34926 +305
Branches 3826 3840 +14
============================================
+ Hits 14254 14413 +159
- Misses 18991 19127 +136
- Partials 1376 1386 +10
```
| [Impacted Files](https://codecov.io/gh/apache/dolphinscheduler/pull/10289?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) | Coverage Δ | |
|---|---|---|
| [...i/service/impl/AlertPluginInstanceServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9BbGVydFBsdWdpbkluc3RhbmNlU2VydmljZUltcGwuamF2YQ==) | `58.49% <0.00%> (-7.47%)` | :arrow_down: |
| [...r/api/service/impl/DqExecuteResultServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9EcUV4ZWN1dGVSZXN1bHRTZXJ2aWNlSW1wbC5qYXZh) | `64.51% <0.00%> (-6.92%)` | :arrow_down: |
| [...nscheduler/api/service/impl/DqRuleServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9EcVJ1bGVTZXJ2aWNlSW1wbC5qYXZh) | `58.78% <0.00%> (-1.22%)` | :arrow_down: |
| [...inscheduler/api/service/impl/QueueServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9RdWV1ZVNlcnZpY2VJbXBsLmphdmE=) | `63.39% <0.00%> (-1.75%)` | :arrow_down: |
| [...nscheduler/api/service/impl/TenantServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9UZW5hbnRTZXJ2aWNlSW1wbC5qYXZh) | `68.69% <0.00%> (-3.79%)` | :arrow_down: |
| [...duler/api/service/impl/WorkerGroupServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9Xb3JrZXJHcm91cFNlcnZpY2VJbXBsLmphdmE=) | `47.91% <0.00%> (-0.68%)` | :arrow_down: |
| [...lphinscheduler/common/enums/AuthorizationType.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1jb21tb24vc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvY29tbW9uL2VudW1zL0F1dGhvcml6YXRpb25UeXBlLmphdmE=) | `0.00% <0.00%> (ø)` | |
| [...permission/ResourcePermissionCheckServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1zZXJ2aWNlL3NyYy9tYWluL2phdmEvb3JnL2FwYWNoZS9kb2xwaGluc2NoZWR1bGVyL3NlcnZpY2UvcGVybWlzc2lvbi9SZXNvdXJjZVBlcm1pc3Npb25DaGVja1NlcnZpY2VJbXBsLmphdmE=) | `6.12% <1.35%> (-17.88%)` | :arrow_down: |
| [...heduler/api/service/impl/SchedulerServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9TY2hlZHVsZXJTZXJ2aWNlSW1wbC5qYXZh) | `8.08% <16.66%> (ø)` | |
| [...uler/api/service/impl/DataAnalysisServiceImpl.java](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZG9scGhpbnNjaGVkdWxlci1hcGkvc3JjL21haW4vamF2YS9vcmcvYXBhY2hlL2RvbHBoaW5zY2hlZHVsZXIvYXBpL3NlcnZpY2UvaW1wbC9EYXRhQW5hbHlzaXNTZXJ2aWNlSW1wbC5qYXZh) | `77.08% <20.00%> (-3.57%)` | :arrow_down: |
| ... and [22 more](https://codecov.io/gh/apache/dolphinscheduler/pull/10289/diff?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) | |
------
[Continue to review full report at Codecov](https://codecov.io/gh/apache/dolphinscheduler/pull/10289?src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
> **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
> `Δ = absolute <relative> (impact)`, `ø = not affected`, `? = missing data`
> Powered by [Codecov](https://codecov.io/gh/apache/dolphinscheduler/pull/10289?src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation). Last update [13af2ad...a3a28e6](https://codecov.io/gh/apache/dolphinscheduler/pull/10289?src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] hstdream commented on a diff in pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
hstdream commented on code in PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#discussion_r884884824
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/constants/ApiFuncIdentificationConstant.java:
##########
@@ -0,0 +1,172 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.dolphinscheduler.api.constants;
+
+import org.apache.dolphinscheduler.api.enums.ExecuteType;
+import java.util.HashMap;
+import java.util.Map;
+
+
+public class ApiFuncIdentificationConstant {
+
+ public static final String ACCESS_TOKEN_MANAGE = "security:token:view";
Review Comment:
ok.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] sonarcloud[bot] commented on pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
sonarcloud[bot] commented on PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#issuecomment-1141138735
Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/dashboard?id=apache-dolphinscheduler&pullRequest=10289)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG) [0 Bugs](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY) [0 Vulnerabilities](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY)
[](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT) [](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT) [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL) [22 Code Smells](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL)
[](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_coverage&view=list) [53.6% Coverage](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_coverage&view=list)
[](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_duplicated_lines_density&view=list) [0.5% Duplication](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_duplicated_lines_density&view=list)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] lenboo commented on a diff in pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
lenboo commented on code in PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#discussion_r884483559
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/ProjectServiceImpl.java:
##########
@@ -481,6 +483,7 @@ private boolean checkReadPermission(User user, Project project) {
}
/**
+<<<<<<< HEAD
Review Comment:
this comment would be clear.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] WangJPLeo commented on a diff in pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
WangJPLeo commented on code in PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#discussion_r884930429
##########
dolphinscheduler-dao/src/main/resources/org/apache/dolphinscheduler/dao/mapper/AlertPluginInstanceMapper.xml:
##########
@@ -59,4 +59,12 @@
where instance_name = #{instanceName} limit 1
</select>
+ <select id="queryAllAlertPluginInstanceList"
+ resultType="org.apache.dolphinscheduler.dao.entity.AlertPluginInstance">
Review Comment:
The method here and line 27 are duplicates.
##########
dolphinscheduler-dao/src/main/java/org/apache/dolphinscheduler/dao/mapper/AccessTokenMapper.java:
##########
@@ -61,4 +61,12 @@ IPage<AccessToken> selectAccessTokenPage(Page page,
* @return delete result
*/
int deleteAccessTokenByUserId(@Param("userId") int userId);
+
+ /**
+ * list authorized Projects
+ * @param userId
+ * @param accessTokensIds
+ * @return access token for specified user
+ */
+ List<AccessToken> listAuthorizedAccessToken(@Param("userId") int userId, @Param("accessTokensIds")List<Integer> accessTokensIds);
Review Comment:
The length of the mapped SQL judgment set should be the same as the method parameter type, SQL uses size() or the method parameter is changed to an array.
##########
dolphinscheduler-service/src/main/java/org/apache/dolphinscheduler/service/permission/ResourcePermissionCheckServiceImpl.java:
##########
@@ -111,17 +116,375 @@ public List<AuthorizationType> authorizationTypes() {
@Override
public boolean permissionCheck(int userId, String url, Logger logger) {
- // all users can create projects
return true;
}
-
@Override
public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
return projectMapper.listAuthorizedProjects(userId, null).stream().map(Project::getId).collect(toSet());
}
}
+ @Component
+ public static class K8sNamespaceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final K8sNamespaceMapper k8sNamespaceMapper;
+
+
+
+ public K8sNamespaceResourceList(K8sNamespaceMapper k8sNamespaceMapper) {
+ this.k8sNamespaceMapper = k8sNamespaceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.K8S_NAMESPACE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class EnvironmentResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final EnvironmentMapper environmentMapper;
+
+
+
+ public EnvironmentResourceList(EnvironmentMapper environmentMapper) {
+ this.environmentMapper = environmentMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ENVIRONMENT);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ @Component
+ public static class QueueResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final QueueMapper queueMapper;
+
+
+
+ public QueueResourceList(QueueMapper queueMapper) {
+ this.queueMapper = queueMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.QUEUE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class WorkerGroupResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final WorkerGroupMapper workerGroupMapper;
+
+
+
+ public WorkerGroupResourceList(WorkerGroupMapper workerGroupMapper) {
+ this.workerGroupMapper = workerGroupMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.WORKER_GROUP);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
Review Comment:
Worker Group also belongs to resource permissions.
##########
dolphinscheduler-dao/src/main/java/org/apache/dolphinscheduler/dao/mapper/UserMapper.java:
##########
@@ -172,4 +172,15 @@ IPage<User> queryUserPaging(Page page,
* @return user list
*/
List<User> queryAuthedUserListByProjectId(@Param("projectId") int projectId);
+
+ /**
+ * list authorized User
+ * @param userId
+ * @param resourcesIds
+ * @param <T>
+ * @return
+ */
+ <T> List<User> listAuthorizedUsersList (@Param("userId") int userId, @Param("resourcesIds")T[] resourcesIds);
+
Review Comment:
The User module changes here and above are to be cancelled.
##########
dolphinscheduler-service/src/main/java/org/apache/dolphinscheduler/service/permission/ResourcePermissionCheckServiceImpl.java:
##########
@@ -111,17 +116,375 @@ public List<AuthorizationType> authorizationTypes() {
@Override
public boolean permissionCheck(int userId, String url, Logger logger) {
- // all users can create projects
return true;
}
-
@Override
public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
return projectMapper.listAuthorizedProjects(userId, null).stream().map(Project::getId).collect(toSet());
}
}
+ @Component
+ public static class K8sNamespaceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final K8sNamespaceMapper k8sNamespaceMapper;
+
+
+
+ public K8sNamespaceResourceList(K8sNamespaceMapper k8sNamespaceMapper) {
+ this.k8sNamespaceMapper = k8sNamespaceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.K8S_NAMESPACE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class EnvironmentResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final EnvironmentMapper environmentMapper;
+
+
+
+ public EnvironmentResourceList(EnvironmentMapper environmentMapper) {
+ this.environmentMapper = environmentMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ENVIRONMENT);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ @Component
+ public static class QueueResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final QueueMapper queueMapper;
+
+
+
+ public QueueResourceList(QueueMapper queueMapper) {
+ this.queueMapper = queueMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.QUEUE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class WorkerGroupResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final WorkerGroupMapper workerGroupMapper;
+
+
+
+ public WorkerGroupResourceList(WorkerGroupMapper workerGroupMapper) {
+ this.workerGroupMapper = workerGroupMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.WORKER_GROUP);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * AlertPluginInstance Resource
+ */
+ @Component
+ public static class AlertPluginInstanceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final AlertPluginInstanceMapper alertPluginInstanceMapper;
+
+
+
+ public AlertPluginInstanceResourceList(AlertPluginInstanceMapper alertPluginInstanceMapper) {
+ this.alertPluginInstanceMapper = alertPluginInstanceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ALERT_PLUGIN_INSTANCE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * AlertPluginInstance Resource
+ */
+ @Component
+ public static class AlertGroupResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final AlertGroupMapper alertGroupMapper;
+
+
+
+ public AlertGroupResourceList(AlertGroupMapper alertGroupMapper) {
+ this.alertGroupMapper = alertGroupMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ALERT_GROUP);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return alertGroupMapper.listAuthorizedAlertGroupList(userId, null).stream().map(AlertGroup::getId).collect(toSet());
+ }
+ }
+
+ /**
+ * Tenant Resource
+ */
+ @Component
+ public static class TenantResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final TenantMapper tenantMapper;
+
+
+
+ public TenantResourceList(TenantMapper tenantMapper) {
+ this.tenantMapper = tenantMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.TENANT);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * User Resource
+ */
+ @Component
+ public static class UsersResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
Review Comment:
This module is not required.
##########
dolphinscheduler-service/src/main/java/org/apache/dolphinscheduler/service/permission/ResourcePermissionCheckServiceImpl.java:
##########
@@ -111,17 +116,375 @@ public List<AuthorizationType> authorizationTypes() {
@Override
public boolean permissionCheck(int userId, String url, Logger logger) {
- // all users can create projects
return true;
}
-
@Override
public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
return projectMapper.listAuthorizedProjects(userId, null).stream().map(Project::getId).collect(toSet());
}
}
+ @Component
+ public static class K8sNamespaceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final K8sNamespaceMapper k8sNamespaceMapper;
+
+
+
+ public K8sNamespaceResourceList(K8sNamespaceMapper k8sNamespaceMapper) {
+ this.k8sNamespaceMapper = k8sNamespaceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.K8S_NAMESPACE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class EnvironmentResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final EnvironmentMapper environmentMapper;
+
+
+
+ public EnvironmentResourceList(EnvironmentMapper environmentMapper) {
+ this.environmentMapper = environmentMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ENVIRONMENT);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
Review Comment:
The data source belongs to the resource permission and cannot return an empty collection.
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/UsersServiceImpl.java:
##########
@@ -151,11 +158,16 @@ public Map<String, Object> createUser(User loginUser,
//check all user params
String msg = this.checkUserParams(userName, userPassword, email, phone);
+ if(resourcePermissionCheckService.functionDisabled()){
+ putMsg(result, Status.FUNCTION_DISABLED, msg);
Review Comment:
After the interface of the User module is verified using the functionDisabled method, no other permission verification is required.
##########
dolphinscheduler-service/src/main/java/org/apache/dolphinscheduler/service/permission/ResourcePermissionCheckServiceImpl.java:
##########
@@ -111,17 +116,375 @@ public List<AuthorizationType> authorizationTypes() {
@Override
public boolean permissionCheck(int userId, String url, Logger logger) {
- // all users can create projects
return true;
}
-
@Override
public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
return projectMapper.listAuthorizedProjects(userId, null).stream().map(Project::getId).collect(toSet());
}
}
+ @Component
+ public static class K8sNamespaceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final K8sNamespaceMapper k8sNamespaceMapper;
+
+
+
+ public K8sNamespaceResourceList(K8sNamespaceMapper k8sNamespaceMapper) {
+ this.k8sNamespaceMapper = k8sNamespaceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.K8S_NAMESPACE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class EnvironmentResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final EnvironmentMapper environmentMapper;
+
+
+
+ public EnvironmentResourceList(EnvironmentMapper environmentMapper) {
+ this.environmentMapper = environmentMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ENVIRONMENT);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ @Component
+ public static class QueueResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final QueueMapper queueMapper;
+
+
+
+ public QueueResourceList(QueueMapper queueMapper) {
+ this.queueMapper = queueMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.QUEUE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+
+ @Component
+ public static class WorkerGroupResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final WorkerGroupMapper workerGroupMapper;
+
+
+
+ public WorkerGroupResourceList(WorkerGroupMapper workerGroupMapper) {
+ this.workerGroupMapper = workerGroupMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.WORKER_GROUP);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * AlertPluginInstance Resource
+ */
+ @Component
+ public static class AlertPluginInstanceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final AlertPluginInstanceMapper alertPluginInstanceMapper;
+
+
+
+ public AlertPluginInstanceResourceList(AlertPluginInstanceMapper alertPluginInstanceMapper) {
+ this.alertPluginInstanceMapper = alertPluginInstanceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ALERT_PLUGIN_INSTANCE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * AlertPluginInstance Resource
+ */
+ @Component
+ public static class AlertGroupResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final AlertGroupMapper alertGroupMapper;
+
+
+
+ public AlertGroupResourceList(AlertGroupMapper alertGroupMapper) {
+ this.alertGroupMapper = alertGroupMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ALERT_GROUP);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return alertGroupMapper.listAuthorizedAlertGroupList(userId, null).stream().map(AlertGroup::getId).collect(toSet());
+ }
+ }
+
+ /**
+ * Tenant Resource
+ */
+ @Component
+ public static class TenantResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final TenantMapper tenantMapper;
+
+
+
+ public TenantResourceList(TenantMapper tenantMapper) {
+ this.tenantMapper = tenantMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.TENANT);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * User Resource
+ */
+ @Component
+ public static class UsersResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final UserMapper userMapper;
+
+
+
+ public UsersResourceList(UserMapper userMapper) {
+ this.userMapper = userMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.USER);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return userMapper.listAuthorizedUsersList(userId, null).stream().map(User::getId).collect(toSet());
+ }
+ }
+
+ /**
+ * DataSource Resource
+ */
+ @Component
+ public static class DataSourceResourceList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final DataSourceMapper dataSourceMapper;
+
+
+
+ public DataSourceResourceList(DataSourceMapper dataSourceMapper) {
+ this.dataSourceMapper = dataSourceMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.DATASOURCE);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return dataSourceMapper.listAuthorizedDataSource(userId, null).stream().map(DataSource::getId).collect(toSet());
+ }
+ }
+
+ /**
+ * DataAnalysis Resource
+ */
+ @Component
+ public static class DataAnalysisList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final CommandMapper commandMapper;
+
+
+
+ public DataAnalysisList(CommandMapper commandMapper) {
+ this.commandMapper = commandMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.DATA_ANALYSIS);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * DataQuality Resource
+ */
+ @Component
+ public static class DataQualityList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final DqRuleMapper dqRuleMapper;
+
+
+
+ public DataQualityList(DqRuleMapper dqRuleMapper) {
+ this.dqRuleMapper = dqRuleMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.DATA_QUALITY);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
+ return Collections.emptySet();
+ }
+ }
+
+ /**
+ * AccessToken Resource
+ */
+ @Component
+ public static class AccessTokenList implements ResourceAcquisitionAndPermissionCheck<Integer> {
+
+ private final AccessTokenMapper accessTokenMapper;
+
+
+
+ public AccessTokenList(AccessTokenMapper accessTokenMapper) {
+ this.accessTokenMapper = accessTokenMapper;
+ }
+
+ @Override
+ public List<AuthorizationType> authorizationTypes() {
+ return Collections.singletonList(AuthorizationType.ACCESS_TOKEN);
+ }
+
+ @Override
+ public boolean permissionCheck(int userId, String url, Logger logger) {
+ return true;
+ }
+
+
+ @Override
+ public Set<Integer> listAuthorizedResource(int userId, Logger logger) {
Review Comment:
AccessToken is not a resource permission.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] WangJPLeo commented on a diff in pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
WangJPLeo commented on code in PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#discussion_r884446724
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/UsersServiceImpl.java:
##########
@@ -155,7 +157,7 @@ public Map<String, Object> createUser(User loginUser,
putMsg(result, Status.REQUEST_PARAMS_NOT_VALID_ERROR, msg);
return result;
}
- if (!isAdmin(loginUser)) {
+ if (!canOperatorPermissions(loginUser,null, AuthorizationType.USER, FuncPermissionEnum.CREATE_USER.toString())) {
putMsg(result, Status.USER_NO_OPERATION_PERM);
Review Comment:
for 'User Api', the commercial version rewrites the entire user module, so the next step in this block is to use whether the Api is disabled instead of whether it has permission.
##########
dolphinscheduler-dao/src/main/java/org/apache/dolphinscheduler/dao/mapper/UserMapper.java:
##########
@@ -172,4 +172,15 @@ IPage<User> queryUserPaging(Page page,
* @return user list
*/
List<User> queryAuthedUserListByProjectId(@Param("projectId") int projectId);
+
+ /**
+ * list authorized User
+ * @param userId
+ * @param resourcesIds
+ * @param <T>
+ * @return
+ */
+ <T> List<User> listAuthorizedUsersList (@Param("userId") int userId, @Param("resourcesIds")T[] resourcesIds);
+
Review Comment:
this can not be added.
##########
dolphinscheduler-dao/src/main/resources/org/apache/dolphinscheduler/dao/mapper/AlertGroupMapper.xml:
##########
@@ -71,4 +71,20 @@
select alert_instance_ids from t_ds_alertgroup
where id = #{alertGroupId}
</select>
+
+ <select id="listAuthorizedAlertGroupList" resultType="org.apache.dolphinscheduler.dao.entity.AlertGroup">
+ select
+ <include refid="baseSql"/>
+ from t_ds_alertgroup ag
+ where 1=1
+ <if test="userId != 0">
+ and ag.create_user_id = #{userId}
+ </if>
+ <if test="alertGroupsIds != null and alertGroupsIds.length > 0">
+ and ag.id in
Review Comment:
Check whether other parameters and sql match.
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/service/impl/DataAnalysisServiceImpl.java:
##########
@@ -145,10 +148,9 @@ public Map<String, Object> countProcessInstanceStateByProject(User loginUser, lo
private Map<String, Object> countStateByProject(User loginUser, long projectCode, String startDate, String endDate
, TriFunction<Date, Date, Long[], List<ExecuteStatusCount>> instanceStateCounter) {
Map<String, Object> result = new HashMap<>();
-
if (projectCode != 0) {
Project project = projectMapper.queryByCode(projectCode);
- result = projectService.checkProjectAndAuth(loginUser, project, projectCode);
+ result = projectService.checkProjectAndAuth(loginUser, project, projectCode,FuncPermissionEnum.PROJECT_OVERVIEW.toString());
Review Comment:
for 'FuncPermissionEnum.PROJECT_OVERVIEW.toString()' , use should be getKey not toString.
##########
dolphinscheduler-dao/src/main/resources/org/apache/dolphinscheduler/dao/mapper/AlertGroupMapper.xml:
##########
@@ -71,4 +71,20 @@
select alert_instance_ids from t_ds_alertgroup
where id = #{alertGroupId}
</select>
+
+ <select id="listAuthorizedAlertGroupList" resultType="org.apache.dolphinscheduler.dao.entity.AlertGroup">
+ select
+ <include refid="baseSql"/>
+ from t_ds_alertgroup ag
+ where 1=1
+ <if test="userId != 0">
+ and ag.create_user_id = #{userId}
+ </if>
+ <if test="alertGroupsIds != null and alertGroupsIds.length > 0">
+ and ag.id in
Review Comment:
AlertGroupMapper.java line 92, param 'alertGroupsIds' type is List. But here length is a wrong usage.
##########
dolphinscheduler-api/src/main/java/org/apache/dolphinscheduler/api/enums/FuncPermissionEnum.java:
##########
@@ -0,0 +1,242 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.apache.dolphinscheduler.api.enums;
+
+import org.springframework.context.i18n.LocaleContextHolder;
+
+import java.util.HashMap;
+import java.util.Locale;
+import java.util.Map;
+
+public enum FuncPermissionEnum{
+
+ HOME("首页", "Home", "首页", "Home", "home:view", 1),
+ PROJECT("项目管理", "Project", "项目管理", "Project", "project:view", 1),
+ CREATE_PROJECT("项目管理", "Project", "创建项目", "Create Project", "project:create", 4),
+ EDIT_PROJECT("项目管理", "Project", "编辑项目", "Edit Project", "project:edit", 4),
+ DELETE_PROJECT("项目管理", "Project", "删除项目", "Delete Project", "project:delete", 4),
+ WORKFLOW_DEFINITION("项目管理", "Project", "工作流定义", "Workflow Definition", "project:definition:list", 4),
+ CREATE_WORKFLOW("项目管理", "Project", "创建工作流", "Create Workflow", "project:definition:create", 3),
+ IMPORT_WORKFLOW("项目管理", "Project", "导入工作流", "Import Workflow", "project:definition:import", 4),
+ EDIT("项目管理", "Project", "编辑工作流", "Edit", "project:definition:update", 3),
+ START("项目管理", "Project", "运行工作流", "Start", "project:executors:start", 4),
+ TIMING("项目管理", "Project", "设置定时", "Timing", "project:schedules:timing", 4),
+ ONLINE_OFFLINE("项目管理", "Project", "工作流上下线", "Online&Offline", "project:definition:release", 4),
+ COPY_WORKFLOW("项目管理", "Project", "复制工作流", "Copy Workflow", "project:definition:copy", 4),
+ CRON_MANAGE("项目管理", "Project", "定时管理", "Cron manage", "project:schedules:corn", 3),
+ DELETE("项目管理", "Project", "删除工作流", "Delete", "project:definition:delete", 4),
+ TREE_VIEW("项目管理", "Project", "树形图", "Tree View", "project:definition:view-tree", 3),
+ EXPORT("项目管理", "Project", "导出工作流", "Export", "project:definition:export", 4),
+ BATCH_COPY("项目管理", "Project", "批量复制", "Batch Copy", "project:definition:batch-copy", 4),
+ DEFINITION_EXPORT("项目管理", "Project", "批量导出", "Export", "project:definition:batch-export", 4),
+ DEFINITION_BATCH_DELETE("项目管理", "Project", "批量删除", "Delete", "project:definition:batch-delete", 4),
+ SWITCH_TO_THIS_VERSION("项目管理", "Project", "切换到该版本", "Switch To This Version", "project:definition:version:switch", 4),
+ DEFINITION_DELETE("项目管理", "Project", "删除工作流", "Delete", "project:definition:version:delete", 4),
+ SAVE("项目管理", "Project", "保存", "save", "project:definition:verify-name", 4),
+ WORKFLOW_INSTANCE("项目管理", "Project", "工作流实例", "Workflow Instance", "project:process-instance:list", 4),
+ RERUN("项目管理", "Project", "重跑工作流实例", "Rerun", "project:executors:execute", 4),
+ FAILED_TO_RETRY("项目管理", "Project", "重跑失败的任务", "Failed to retry", "project:executors:retry", 4),
+ STOP("项目管理", "Project", "停止工作流实例", "stop", "project:executors:stop", 4),
+ RECOVERY_SUSPEND("项目管理", "Project", "恢复运行", "Recovery Suspend", "project:executors:recover", 4),
+ PAUSE("项目管理", "Project", "暂停工作流实例", "Pause", "project:executors:pause", 4),
+ INSTANCE_DELETE("项目管理", "Project", "删除工作流实例", "Delete", "project:process-instance:delete", 4),
+ GANTT("项目管理", "Project", "甘特图", "Gantt", "project:process-instance:view-gantt", 3),
+ INSTANCE_BATCH_DELETE("项目管理", "Project", "批量删除", "Delete", "project:process-instance:batch-delete", 4),
+ FORCED_SUCCESS("项目管理", "Project", "强制成功", "Forced Success", "project:task-instance:force-success", 4),
+ VIEW_LOG("项目管理", "Project", "查看日志", "View Log", "project:log:detail", 4),
+ DOWNLOAD_LOG("项目管理", "Project", "下载日志", "Download Log", "project:log:download-log", 4),
+ PROJECT_OVERVIEW("项目管理", "Project", "项目概览", "Project Overview", "project:overview:view", 3),
+ WORKFLOW_RELATION("项目管理", "Project", "工作流关系", "Workflow Relation", "project:lineages:view", 2),
+ WORKFLOW_DEFINITION_VIEW("项目管理", "Project", "工作流定义", "Workflow Definition", "project:definition:view", 2),
+ WORKFLOW_INSTANCE_VIEW("项目管理", "Project", "工作流实例", "Workflow Instance", "project:process-instance:view", 2),
+ TASK_INSTANCE("项目管理", "Project", "任务实例", "Task Instance", "project:task-instance:view", 2),
+ UPDATE("项目管理", "Project", "编辑工作流实例", "Update", "project:process-instance:update", 3),
+ VERSION_LIST("项目管理", "Project", "查看版本信息", "Version List", "project:version:list", 4),
+ TASK_DEFINITION("项目管理", "Project", "任务定义", "Task Definition", "project:task-definition:view", 2),
+ CREATE_TASK_DEFINITION("项目管理", "Project", "创建任务", "Create Task Definition", "project:task-definition:create", 4),
+ EDIT_TASK_DEFINITION("项目管理", "Project", "编辑任务", "Edit Task Definition", "project:task-definition:edit", 4),
+ MOVE_TASK_DEFINITION("项目管理", "Project", "移动任务", "Move Task Definition", "project:task-definition:move", 4),
+ TASK_VERSION_VIEW("项目管理", "Project", "查看任务版本", "Task Version View", "project:task-definition:version", 4),
+ DELETE_TASK_DEFINITION("项目管理", "Project", "删除任务", "Delete Task Definition", "project:task-definition:delete", 4),
+ RESOURCES("资源中心", "Resources", "资源中心", "Resources", "resources:view", 1),
+ FOLDER_CREATE("资源中心", "Resources", "创建文件夹", "Create Folder", "resources:file:create", 4),
+ FILE_CREATE("资源中心", "Resources", "创建文件", "Create File", "resources:file:online-create", 3),
+ FILE_UPLOAD("资源中心", "Resources", "上传文件", "Upload Files", "resources:file:update", 4),
+ FILE_EDIT("资源中心", "Resources", "编辑", "Edit", "resources:file:update-content", 3),
+ FILE_RENAME("资源中心", "Resources", "重命名", "Rename", "resources:file:rename", 4),
+ FILE_DOWNLOAD("资源中心", "Resources", "下载", "Download", "resources:file:download", 4),
+ FILE_DELETE("资源中心", "Resources", "删除", "Delete", "resources:file:delete", 4),
+ UDF_CREATE_FOLDER("资源中心", "Resources", "创建文件夹", "Create Folder", "resources:udf:create", 4),
+ UPLOAD_UDF_RESOURCES("资源中心", "Resources", "上传UDF资源", "Upload UDF Resources", "resources:udf:upload", 4),
+ UDF_EDIT("资源中心", "Resources", "编辑", "Edit", "resources:udf:edit", 4),
+ UDF_DOWNLOAD("资源中心", "Resources", "下载", "Download", "resources:udf:download", 4),
+ UDF_DELETE("资源中心", "Resources", "删除", "Delete", "resources:udf:delete", 4),
+ CREATE_UDF_FUNCTION("资源中心", "Resources", "创建UDF函数", "Create UDF Function", "resources:udf-func:create", 4),
+ UDF_FUNC_EDIT("资源中心", "Resources", "编辑", "Edit", "resources:udf-func:update", 4),
+ UDF_FUNC_DELETE("资源中心", "Resources", "删除", "Delete", "resources:udf-func:delete", 4),
+ TASK_GROUP_CREATE("资源中心", "Resources", "创建任务组", "Create task group", "resources:task-group:create", 4),
+ TASK_GROUP_CLOSE("资源中心", "Resources", "切换任务组状态", "Switch status", "resources:task-group:close", 4),
+ TASK_GROUP_EDIT("资源中心", "Resources", "编辑任务组", "Edit task group", "resources:task-group:update", 4),
+ TASK_GROUP_VIEW_QUEUE("资源中心", "Resources", "查看任务组队列", "View the queue of the task group", "resources:task-group:queue-view", 4),
+ TASK_GROUP_QUEUE_PRIORITY("资源中心", "Resources", "修改优先级", "Edit the priority", "resources:task-group-queue:priority", 4),
+ TASK_GROUP_QUEUE_START("资源中心", "Resources", "强制启动", "start the task", "resources:task-group-queue:start", 4),
+ FILE_VIEW("资源中心", "Resources", "文件管理", "File Manage", "resources:file:view", 2),
+ UDF_FILE_VIEW("资源中心", "Resources", "资源管理", "Resource Manage", "resources:udf:view", 2),
+ UDF_FUNCTION_VIEW("资源中心", "Resources", "函数管理", "Function Manage", "resources:udf-func:view", 2),
+ TASK_GROUP_OPTION_VIEW("资源中心", "Resources", "任务组配置", "Task Group Option", "resources:task-group:view", 3),
+ TASK_GROUP_QUEUE("资源中心", "Resources", "任务组队列", "Task Group Queue", "resources:task-group-queue:view", 3),
+ MONITOR("监控中心", "Monitor", "监控中心", "Monitor", "monitor:view", 1),
+ MONITOR_MASTER("监控中心", "Monitor", "Master", "Master", "monitor:masters:view", 2),
+ MONITOR_WORKER("监控中心", "Monitor", "Worker", "Worker", "monitor:workers:view", 2),
+ MONITOR_DB("监控中心", "Monitor", "DB", "DB", "monitor:databases:view", 2),
+ MONITOR_STATISTICS("监控中心", "Monitor", "Statistics", "Statistics", "monitor:statistics:view", 2),
+ MONITOR_EVENT_LIST("监控中心", "Monitor", "事件列表", "Event List", "monitor:event:view", 2),
+ DATASOURCE("数据源中心", "Datasource", "数据源中心", "Datasource", "datasource:view", 1),
+ DATASOURCE_CREATE_DATASOURCE("数据源中心", "Datasource", "创建数据源", "Create DataSource", "datasource:create", 4),
+ DATASOURCE_EDIT("数据源中心", "Datasource", "编辑", "Edit", "datasource:update", 4),
+ DATASOURCE_DELETE("数据源中心", "Datasource", "删除", "Delete", "datasource:delete", 4),
+ DATASOURCE_LIST("数据源中心", "Datasource", "数据源中心", "Datasource", "datasource:list", 2),
+ DATASOURCE_PARAM_VIEW("数据源中心", "Datasource", "查看数据源参数", "DataSource Param View", "datasource:param-view", 4),
+ SECURITY("安全中心", "Security", "安全中心", "Security", "security:view", 1),
+ CREATE_TENANT("安全中心", "Security", "创建租户", "Create Tenant", "security:tenant:create", 4),
+ TENANT_EDIT("安全中心", "Security", "编辑", "Edit", "security:tenant:update", 4),
+ TENANT_DELETE("安全中心", "Security", "删除", "Delete", "security:tenant:delete", 4),
+ CREATE_ALARM_GROUP("安全中心", "Security", "创建告警组", "Create Alarm Group", "security:alert-group:create", 4),
+ ALERT_GROUP_EDIT("安全中心", "Security", "编辑", "Edit", "security:alert-group:update", 4),
+ ALERT_GROUP_DELETE("安全中心", "Security", "删除", "Delete", "security:alert-group:delete", 4),
+ CREATE_ALARM_INSTANCE("安全中心", "Security", "创建告警实例", "Create Alarm Instance", "security:alert-plugin:create", 4),
+ ALERT_PLUGIN_EDIT("安全中心", "Security", "编辑", "Edit", "security:alert-plugin:update", 4),
+ ALERT_PLUGIN_DELETE("安全中心", "Security", "删除", "Delete", "security:alert-plugin:delete", 4),
+ CREATE_WORKER_GROUP("安全中心", "Security", "创建Worker分组", "Create Worker Group", "security:worker-group:create", 4),
+ WORKER_GROUP_EDIT("安全中心", "Security", "编辑", "Edit", "security:worker-group:update", 4),
+ WORKER_GROUP_DELETE("安全中心", "Security", "删除", "Delete", "security:worker-group:delete", 4),
+ CREATE_YARN_QUEUE("安全中心", "Security", "创建队列", "Create Yarn Queue", "security:queue:create", 4),
+ QUEUE_EDIT("安全中心", "Security", "编辑队列", "Edit", "security:queue:update", 4),
+ CREATE_ENVIRONMENT("安全中心", "Security", "创建环境", "Create Environment", "security:environment:create", 4),
+ ENVIRONMENT_EDIT("安全中心", "Security", "编辑环境", "Edit", "security:environment:update", 4),
+ ENVIRONMENT_DELETE("安全中心", "Security", "删除环境", "Delete", "security:environment:delete", 4),
+ TOKEN_EDIT("安全中心", "Security", "编辑令牌", "Edit", "security:token:update", 4),
+ TOKEN_DELETE("安全中心", "Security", "删除令牌", "Delete", "security:token:delete", 4),
+ CREATE_TOKEN("安全中心", "Security", "创建令牌", "Create Token", "security:token:create", 4),
+ CREATE_CALENDAR("安全中心", "Security", "创建日历", "Create Calendar", "security:calendar:create", 4),
+ CALENDAR_EDIT("安全中心", "Security", "编辑日历", "Edit", "security:calendar:update", 4),
+ CALENDAR_DELETE("安全中心", "Security", "删除日历", "Delete", "security:calendar:delete", 4),
+ GENERATE_TOKEN("安全中心", "Security", "生成令牌", "Generate Token", "security:token:generate", 4),
+ CREATE_CARD("安全中心", "Security", "创建牌", "Create Card", "security:cards:create", 4),
+ CARDS_EDIT("安全中心", "Security", "编辑牌", "Edit", "security:cards:update", 4),
+ EDIT_VALUE("安全中心", "Security", "编辑牌值", "Edit Value", "security:cards:value", 4),
+ CARDS_DELETE("安全中心", "Security", "删除牌", "Delete", "security:cards:delete", 4),
+ ALARM_GROUP_MANAGE("安全中心", "Security", "告警组管理", "Alarm Group Manage", "security:alert-group:view", 2),
+ ALARM_INSTANCE_MANAGE("安全中心", "Security", "告警实例管理", "Alarm Instance Manage", "security:alert-plugin:view", 2),
+ WORKER_GROUP_MANAGE("安全中心", "Security", "Worker分组管理", "Worker Group Manage", "security:worker-group:view", 2),
+ TOKEN_MANAGE("安全中心", "Security", "令牌管理", "Token Manage", "security:token:view", 2),
+ CALENDAR_MANAGE("安全中心", "Security", "日历管理", "Calendar Manage", "security:calendar:view", 2),
+ CARD_MANAGER("安全中心", "Security", "牌管理", "Card Manager", "security:cards:view", 2),
+ TENANT_MANAGER("安全中心", "Security", "租户管理", "Tenant Manager", "security:tenant:view", 2),
+ YARN_QUEUE_MANAGE("安全中心", "Security", "Yarn队列管理", "Yarn Queue Manage", "security:queue:view", 2),
+ USER_MANAGER("安全中心", "Security", "用户管理", "User Manager", "security:user:view", 2),
+ ALL_ROLES("安全中心", "Security", "所有角色", "All Roles", "security:user:roles", 4),
+ CREATE_USER("安全中心", "Security", "创建用户", "Create User", "security:user:create", 4),
+ IMPORT_USERS("安全中心", "Security", "导入用户", "Import Users", "security:user:import", 4),
+ DOWNLOAD_TEMPLATE("安全中心", "Security", "下载模版", "Download Template", "security:user:template", 4),
+ USER_EDIT("安全中心", "Security", "编辑", "Edit", "security:user:update", 4),
+ ASSOCIATED_ROLE("安全中心", "Security", "关联角色", "Associated Role", "security:user:role", 4),
+ VIEW_PERMISSIONS("安全中心", "Security", "查看权限", "View Permissions", "security:user:permission", 2),
+ RESET_PASSWORD("安全中心", "Security", "重置密码", "Reset Password", "security:user:reset-pwd", 4),
+ USER_DELETE("安全中心", "Security", "删除", "Delete", "security:user:delete", 4),
+ USER_REVOKE_PROJECT ("安全中心", "Security", "撤销项目", "Revoke", "security:user:revoke:project", 4),
+ USER_GRANT_K8SNAMESPACE ("安全中心", "Security", "授权k8s命名空间", "Grant", "security:user:grant:k8snamespace", 4),
+ USER_GRANT_PROJECT ("安全中心", "Security", "授权项目", "Grant", "security:user:grant:project", 4),
+ BATCH_DELETION("安全中心", "Security", "批量删除", "Batch Deletion", "security:user:batch-delete", 4),
+ ROLE_MANAGER("安全中心", "Security", "角色管理", "Role Manager", "security:role:view", 2),
+ ROLE_CREATE("安全中心", "Security", "创建角色", "Role Create", "security:role:create", 4),
+ VIEW_PERMISSION("安全中心", "Security", "查看权限", "View Permission", "security:role:permission-view", 3),
+ ROLE_RENAME("安全中心", "Security", "重命名", "Rename", "security:role:rename", 4),
+ ASSIGN_PERMISSION("安全中心", "Security", "分配权限", "Assign Permission", "security:role:permission-assign", 3),
+ ROLE_DELETE("安全中心", "Security", "删除", "Delete", "security:role:delete", 4),
+ ENVIRONMENT_MANAGER("安全中心", "Security", "环境管理", "Environment Manager", "security:environment:view", 2),
+ ALARM_LIST("安全中心", "Monitor", "告警列表", "Alarm List", "monitor:alert:view", 2),
+ VERSION_DELETE("项目管理", "Project", "查看版本信息", "Version delete", "project:version:delete", 4)
+ ;
+
+
+ FuncPermissionEnum(String zhModule, String enModule, String zhName, String enName, String key, Integer type) {
+ this.zhModule = zhModule;
+ this.enModule = enModule;
+ this.zhName = zhName;
+ this.enName = enName;
+ this.key = key;
+ this.type = type;
+ }
+
+ private final static Map<ExecuteType,String> map = new HashMap<>();
+
+ static{
+ for(ExecuteType type : ExecuteType.values()){
+ switch (type){
+ case REPEAT_RUNNING:
+ map.put(type,RERUN.toString());
Review Comment:
use their key value
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] sonarcloud[bot] commented on pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
sonarcloud[bot] commented on PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#issuecomment-1140718775
Kudos, SonarCloud Quality Gate passed! [](https://sonarcloud.io/dashboard?id=apache-dolphinscheduler&pullRequest=10289)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG) [0 Bugs](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=BUG)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY) [0 Vulnerabilities](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=VULNERABILITY)
[](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT) [](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT) [0 Security Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=SECURITY_HOTSPOT)
[](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL) [](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL) [23 Code Smells](https://sonarcloud.io/project/issues?id=apache-dolphinscheduler&pullRequest=10289&resolved=false&types=CODE_SMELL)
[](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_coverage&view=list) [67.2% Coverage](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_coverage&view=list)
[](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_duplicated_lines_density&view=list) [0.6% Duplication](https://sonarcloud.io/component_measures?id=apache-dolphinscheduler&pullRequest=10289&metric=new_duplicated_lines_density&view=list)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [dolphinscheduler] lenboo commented on pull request #10289: [Feature][API] Modify the permissions of project management, security center, data source center and data quality module.
Posted by GitBox <gi...@apache.org>.
lenboo commented on PR #10289:
URL: https://github.com/apache/dolphinscheduler/pull/10289#issuecomment-1140725885
Please refer to the issue .
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@dolphinscheduler.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org