From c8d1ac215ac33515b684b6dee02f01a4dac10ece Mon Sep 17 00:00:00 2001 From: rainzm Date: Tue, 13 Apr 2021 14:40:08 +0800 Subject: [PATCH] fix(cloudcommon): use rbac authentication dedicated to the list interface in GetModelProperty --- pkg/cloudcommon/db/db_dispatcher.go | 6 +----- 1 file changed, 1 insertion(+), 5 deletions(-) diff --git a/pkg/cloudcommon/db/db_dispatcher.go b/pkg/cloudcommon/db/db_dispatcher.go index 2da3323881..494ecc6587 100644 --- a/pkg/cloudcommon/db/db_dispatcher.go +++ b/pkg/cloudcommon/db/db_dispatcher.go @@ -932,11 +932,7 @@ func (dispatcher *DBModelDispatcher) tryGetModelProperty(ctx context.Context, pr } if consts.IsRbacEnabled() { - ownerId, err := fetchOwnerId(ctx, dispatcher.modelManager, userCred, query) - if err != nil { - return nil, httperrors.NewGeneralError(err) - } - err = isClassRbacAllowed(dispatcher.modelManager, userCred, ownerId, policy.PolicyActionList, property) + _, _, err := FetchCheckQueryOwnerScope(ctx, userCred, query, dispatcher.modelManager, policy.PolicyActionList, true) if err != nil { return nil, err }