Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

不同资源组用户提交的SQL上线内容,无法点进去查看详情语句 #2632

Open
firehalt opened this issue May 9, 2024 · 3 comments

Comments

@firehalt
Copy link

firehalt commented May 9, 2024

重现步骤

不同资源组用户提交的SQL上线内容,无法点进去查看详情语句,需要什么权限才能才看(给了所有权限都看不了)
比如:QA资源组成员提交的SQL上线语句,研发资源组成员点击进去查看详情就会出现403

预期外的结果

所有资源组的提交的语句都可以点击进去查看具体sql语句

日志文本

django.core.exceptions.PermissionDenied
[2024-05-09 17:04:39,274][MainThread:140459339388736][task_id:default][exception_logging_middleware.py:12][ERROR]- Traceback (most recent call last):
  File "/opt/venv4archery/lib/python3.9/site-packages/django/core/handlers/base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/opt/archery/sql/views.py", line 187, in detail
    raise PermissionDenied
django.core.exceptions.PermissionDenied

2024-05-09 17:04:39,274 - default - ERROR - Traceback (most recent call last):
  File "/opt/venv4archery/lib/python3.9/site-packages/django/core/handlers/base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/opt/archery/sql/views.py", line 187, in detail
    raise PermissionDenied
django.core.exceptions.PermissionDenied

2024-05-09 17:04:39,286 - django.request - WARNING - Forbidden (Permission denied): /detail/3/
Traceback (most recent call last):
  File "/opt/venv4archery/lib/python3.9/site-packages/django/core/handlers/exception.py", line 56, in inner
    response = get_response(request)
  File "/opt/venv4archery/lib/python3.9/site-packages/django/core/handlers/base.py", line 197, in _get_response
    response = wrapped_callback(request, *callback_args, **callback_kwargs)
  File "/opt/archery/sql/views.py", line 187, in detail
    raise PermissionDenied
django.core.exceptions.PermissionDenied

版本

1.10.0

部署方式

Docker

是否还有其他可以辅助定位问题的信息?比如数据库版本等

No response

@firehalt
Copy link
Author

firehalt commented May 9, 2024

9999988

@feiazifeiazi
Copy link
Contributor

@firehalt 研发组,有这个实例组的权限吗? 研发组自己提交这个实例组的工单,他能看到的吧。

@hhyo
Copy link
Owner

hhyo commented Aug 24, 2024

资源组是用来做资源隔离的,设计上不允许跨资源组的访问,比较推荐的配置方式是

  1. 资源组对应项目组,管理项目组内的所有资源
  2. 权限组对应角色,相同角色具有相同的资源操作权限

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants