You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by we...@apache.org on 2023/08/14 08:02:28 UTC
[cloudstack] branch 4.18 updated: CKS: check access when get kubernetescluster config (#7854)
This is an automated email from the ASF dual-hosted git repository.
weizhou pushed a commit to branch 4.18
in repository https://gitbox.apache.org/repos/asf/cloudstack.git
The following commit(s) were added to refs/heads/4.18 by this push:
new bf9c71430b6 CKS: check access when get kubernetescluster config (#7854)
bf9c71430b6 is described below
commit bf9c71430b648f1e8a025084cbb8b737557aad8c
Author: Wei Zhou <we...@apache.org>
AuthorDate: Mon Aug 14 10:02:20 2023 +0200
CKS: check access when get kubernetescluster config (#7854)
---
.../java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java | 2 ++
1 file changed, 2 insertions(+)
diff --git a/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java b/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
index 0c07268b82f..f0fa335d22c 100644
--- a/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
+++ b/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
@@ -1285,6 +1285,8 @@ public class KubernetesClusterManagerImpl extends ManagerBase implements Kuberne
if (kubernetesCluster == null) {
throw new InvalidParameterValueException("Invalid Kubernetes cluster ID specified");
}
+ Account caller = CallContext.current().getCallingAccount();
+ accountManager.checkAccess(caller, SecurityChecker.AccessType.OperateEntry, false, kubernetesCluster);
KubernetesClusterConfigResponse response = new KubernetesClusterConfigResponse();
response.setId(kubernetesCluster.getUuid());
response.setName(kubernetesCluster.getName());