You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@linkis.apache.org by GitBox <gi...@apache.org> on 2022/04/01 13:02:18 UTC
[GitHub] [incubator-linkis] peacewong opened a new issue #1867: [Bug] [1.1.2]Administrator interface common users can access unauthorized access
peacewong opened a new issue #1867:
URL: https://github.com/apache/incubator-linkis/issues/1867
### Search before asking
- [X] I searched the [issues](https://github.com/apache/incubator-linkis/issues) and found no similar issues.
### Linkis Component
linkis-public-enhancements
### What happened + What you expected to happen
The /api/rest_j/v1/configuration/createSecondCategory interface can override the authority to add engine types
/api/rest_j/v1/configuration/createSecondCategory接口可越权新增引擎类型
The /api/rest_j/v1/microservice/allInstance interface can query the list of microservices without authority
/api/rest_j/v1/microservice/allInstance接口可越权查询微服务清单
It is recommended to judge the administrator user, through the method:
`Configuration.isAdmin`
### Relevent platform
all
### Reproduction script
no
### Anything else
_No response_
### Are you willing to submit a PR?
- [ ] Yes I am willing to submit a PR!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org
[GitHub] [incubator-linkis] legendtkl commented on issue #1867: [Bug] [1.1.2]Administrator interface common users can access unauthorized access
Posted by GitBox <gi...@apache.org>.
legendtkl commented on issue #1867:
URL: https://github.com/apache/incubator-linkis/issues/1867#issuecomment-1086489909
I will fix this
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@linkis.apache.org
For additional commands, e-mail: dev-help@linkis.apache.org