[GitHub] [incubator-streampark] zhoulii opened a new pull request, #2634: [Improve] Add more constraints to user permission

["zhoulii (via GitHub)" <gi...@apache.org>]

zhoulii opened a new pull request, #2634:
URL: https://github.com/apache/incubator-streampark/pull/2634

   ## What changes were proposed in this pull request
   
   Add more constraints to user permissions to prevent the following events:
   
   - use one user's login token to modify another user's info;
   - use one user's login token which has high permissions from team A to modify the `Member` in team B
   - use one user's login token which has high permissions from team A to modify the `Application` in team B
   
   ## Brief change log
   
   Add three annotations: `CheckUser`、`CheckTeam`、`CheckApp` to verify the relationship betwenn user operations and login user before the operation is executed.
   
   ## Verifying this change
   
   - *Manually verified the change by testing locally.* 
   
   ## Does this pull request potentially affect one of the following parts
    - Dependencies (does it add or upgrade a dependency): (yes / **no**)
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [incubator-streampark] wolfboys merged pull request #2634: [Improve] Add more constraints to user permission

["wolfboys (via GitHub)" <gi...@apache.org>]

wolfboys merged PR #2634:
URL: https://github.com/apache/incubator-streampark/pull/2634


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@streampark.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org