fix(api): enforce admin and RBAC permissions on data source integrates GET endpoint (#41079) (#41080)

api/controllers/console/datasets/data_source.py

@@ -139,6 +139,8 @@ register_response_schema_models(
 class DataSourceApi(Resource):
     @setup_required
     @login_required
+    @is_admin_or_owner_required
+    @rbac_permission_required(RBACResourceScope.WORKSPACE, RBACPermission.CREDENTIAL_MANAGE, resource_required=False)
     @account_initialization_required
     @console_ns.response(200, "Success", console_ns.models[DataSourceIntegrateListResponse.__name__])
     @with_current_tenant_id

api/tests/unit_tests/controllers/console/test_workspace_credential_mutation_permissions.py

@@ -16,6 +16,7 @@ from controllers.console.workspace.tool_providers import ToolBuiltinProviderAddA
     [
         (ToolBuiltinProviderAddApi.post, RBACPermission.CREDENTIAL_CREATE),
         (DataSourceApi.patch, RBACPermission.CREDENTIAL_MANAGE),
+        (DataSourceApi.get, RBACPermission.CREDENTIAL_MANAGE),
     ],
 )
 def test_workspace_credential_mutations_require_management_permission(