fix: check write permission on explicit namespace in Add()
Build and Publish Arch Package / build-arch (amd64, x86_64) (push) Successful in 48s
Build and Publish Arch Package / build-arch (arm64, aarch64) (push) Successful in 42s
Build and Publish Docker Image / build-apk (amd64, x86_64) (push) Successful in 44s
Build and Publish Docker Image / build-apk (arm64, aarch64) (push) Successful in 52s
Build and Publish Docker Image / build-and-push-docker (push) Successful in 10m47s
Build and Publish Arch Package / build-arch (amd64, x86_64) (push) Successful in 48s
Build and Publish Arch Package / build-arch (arm64, aarch64) (push) Successful in 42s
Build and Publish Docker Image / build-apk (amd64, x86_64) (push) Successful in 44s
Build and Publish Docker Image / build-apk (arm64, aarch64) (push) Successful in 52s
Build and Publish Docker Image / build-and-push-docker (push) Successful in 10m47s
This commit is contained in:
@@ -499,6 +499,9 @@ func (s *nodeServiceImpl) Add(input AddInput) (*models.Node, error) {
|
|||||||
if err != nil {
|
if err != nil {
|
||||||
return err
|
return err
|
||||||
}
|
}
|
||||||
|
if input.Namespace != "" && !pc.canWrite(nsID) {
|
||||||
|
return fmt.Errorf("permission denied: no write access to namespace %q", input.Namespace)
|
||||||
|
}
|
||||||
ownerID = nsID
|
ownerID = nsID
|
||||||
}
|
}
|
||||||
if err := st.AddRel(ownerID, string(models.RelHasOwnership), id); err != nil {
|
if err := st.AddRel(ownerID, string(models.RelHasOwnership), id); err != nil {
|
||||||
|
|||||||
Reference in New Issue
Block a user