Merge pull request #5373 from swordqiu/automated-cherry-pick-of-#5372-upstream-release-3.1

Automated cherry pick of #5372: fix: no scope shcedtag should be visible to all
This commit is contained in:
Zexi Li
2020-03-06 18:32:28 +08:00
committed by GitHub
+8 -2
View File
@@ -44,9 +44,15 @@ func (m *SScopedResourceBaseManager) FilterByOwner(q *sqlchemy.SQuery, userCred
}
switch scope {
case rbacutils.ScopeDomain:
q = q.Filter(sqlchemy.Equals(q.Field("domain_id"), userCred.GetDomainId()))
q = q.Filter(sqlchemy.OR(
sqlchemy.Equals(q.Field("domain_id"), userCred.GetDomainId()),
sqlchemy.IsNullOrEmpty(q.Field("domain_id")),
))
case rbacutils.ScopeProject:
q = q.Filter(sqlchemy.Equals(q.Field("tenant_id"), userCred.GetProjectId()))
q = q.Filter(sqlchemy.OR(
sqlchemy.Equals(q.Field("tenant_id"), userCred.GetProjectId()),
sqlchemy.IsNullOrEmpty(q.Field("tenant_id")),
))
}
return q
}