jprdonnelly/kestra
1
0
Fork 0
mirror of https://github.com/kestra-io/kestra.git synced 2025-12-19 18:05:41 -05:00
Code Issues Packages Projects Releases Wiki Activity

feat(executions): add support to ACL check inside the run context

Browse Source 
Part-of: https://github.com/kestra-io/kestra-ee/issues/4228
This commit is contained in:
Loïc Mathieu
2025-11-28 12:16:01 +01:00
parent f2c15185fb
commit 496e01eb3e
25 changed files with 333 additions and 151 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
webserver/src/main/java/io/kestra/webserver/controllers/api/ExecutionController.java
View File

@@ -137,6 +137,9 @@ public class ExecutionController {
@Inject
private FlowService flowService;
@Inject
private NamespaceService namespaceService;
@Inject
protected ExecutionRepositoryInterface executionRepository;
@@ -871,7 +874,7 @@ public class ExecutionController {
if (Namespace.NAMESPACE_FILE_SCHEME.equals(path.getScheme())) {
// if there is an authority, it means the namespace file is for another namespace, so we check it
if (path.getAuthority() != null) {
flowService.checkAllowedNamespace(execution.getTenantId(), path.getAuthority(), execution.getTenantId(), execution.getNamespace());
namespaceService.checkAllowedNamespace(execution.getTenantId(), path.getAuthority(), execution.getTenantId(), execution.getNamespace());
}
return null;
}