CKS: check access when get kubernetescluster config (#7854)

This commit is contained in:
Wei Zhou 2023-08-14 10:02:20 +02:00 committed by GitHub
parent feb9509547
commit bf9c71430b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1285,6 +1285,8 @@ public class KubernetesClusterManagerImpl extends ManagerBase implements Kuberne
if (kubernetesCluster == null) { if (kubernetesCluster == null) {
throw new InvalidParameterValueException("Invalid Kubernetes cluster ID specified"); throw new InvalidParameterValueException("Invalid Kubernetes cluster ID specified");
} }
Account caller = CallContext.current().getCallingAccount();
accountManager.checkAccess(caller, SecurityChecker.AccessType.OperateEntry, false, kubernetesCluster);
KubernetesClusterConfigResponse response = new KubernetesClusterConfigResponse(); KubernetesClusterConfigResponse response = new KubernetesClusterConfigResponse();
response.setId(kubernetesCluster.getUuid()); response.setId(kubernetesCluster.getUuid());
response.setName(kubernetesCluster.getName()); response.setName(kubernetesCluster.getName());