opensource/cloudpods
3
0
Fork 0
mirror of https://github.com/yunionio/cloudpods.git synced 2026-09-24 16:03:43 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2407 from ioito/hotfix/qx-metadata-rbac-fix

Browse Source 
fix: 避免admin=false时,不显示其余项目下的标签信息
This commit is contained in:
yunion-ci-robot
2019-08-21 15:32:09 +08:00
committed by GitHub
parent a84b68c6fc 0a8d1e5fec
commit 5c55494e00
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/cloudcommon/db/metadata.go
+1 -1
View File
@@ -163,7 +163,7 @@ func (manager *SMetadataManager) ListItemFilter(ctx context.Context, q *sqlchemy
prefix := sqlchemy.NewStringField(fmt.Sprintf("%s::", man.Keyword()))
field := sqlchemy.CONCAT(man.Keyword(), prefix, resourceView.Field("id"))
sq := resourceView.Query(field)
if !admin || !IsAllowList(rbacutils.ScopeSystem, userCred, man) {
if !admin && !IsAllowList(rbacutils.ScopeSystem, userCred, man) {
sq = man.FilterByOwner(sq, userCred, man.ResourceScope())
}
conditions = append(conditions, sqlchemy.In(q.Field("id"), sq))