fix: Fix the vulnerability in viewing enumeration values across workspaces

2026-11-08 01:06:59 +08:00 · 2026-06-17 17:56:41 +08:00
parent df44e660bd
commit 1c8b6f95ae
1 changed files with 1 additions and 0 deletions
@@ -65,6 +65,7 @@ async def check(session: SessionDep, trans: Trans, ds: CoreDatasource):


@router.get("/check/{ds_id}", response_model=bool, summary=f"{PLACEHOLDER_PREFIX}ds_check")
+@require_permissions(permission=SqlbotPermission(type='ds', keyExpression="ds_id"))
 async def check_by_id(session: SessionDep, trans: Trans,
                      ds_id: int = Path(..., description=f"{PLACEHOLDER_PREFIX}ds_id")):
    def inner():