feat : custom仓库支持本地权限校验 TencentBlueKing#1905 (TencentBlueKing#1944)

* feat: 修改生成分支逻辑 TencentBlueKing#738 * feat: 修改生成分支逻辑 TencentBlueKing#738 * feat: 修改生成分支逻辑 TencentBlueKing#738 * feat: 修改生成分支逻辑 TencentBlueKing#738 * feat: 修改生成分支逻辑 TencentBlueKing#738 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905 * feat : custom仓库支持本地权限校验 TencentBlueKing#1905
yaoxuwan · Mar 28, 2024 · 1eb163c · 1eb163c
1 parent cf3eb56
commit 1eb163c
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/...uth/src/main/kotlin/com/tencent/bkrepo/auth/service/bkauth/DevopsPermissionServiceImpl.kt b/...uth/src/main/kotlin/com/tencent/bkrepo/auth/service/bkauth/DevopsPermissionServiceImpl.kt
@@ -41,6 +41,7 @@ import com.tencent.bkrepo.auth.constant.CUSTOM
 import com.tencent.bkrepo.auth.constant.LOG
 import com.tencent.bkrepo.auth.constant.PIPELINE
 import com.tencent.bkrepo.auth.constant.REPORT
+import com.tencent.bkrepo.auth.pojo.enums.PermissionAction.MANAGE
 import com.tencent.bkrepo.auth.pojo.enums.PermissionAction.READ
 import com.tencent.bkrepo.auth.pojo.enums.PermissionAction.WRITE
 import com.tencent.bkrepo.auth.pojo.enums.PermissionAction.VIEW
@@ -149,6 +150,9 @@ class DevopsPermissionServiceImpl constructor(
 
             // project权限
             if (resourceType == PROJECT.name) {
+                if (action == MANAGE.name) {
+                    return isDevopsProjectAdmin(uid, projectId!!)
+                }
                 return isDevopsProjectMember(uid, projectId!!, action)
                         || checkBkIamV3ProjectPermission(projectId!!, uid, action)
             }