[fix](auth)node priv can login web ui (#32521)
This commit is contained in:
@ -68,7 +68,7 @@ public class BaseController {
|
||||
UserIdentity currentUser = checkPassword(authInfo);
|
||||
|
||||
if (checkAuth) {
|
||||
checkGlobalAuth(currentUser, PrivPredicate.ADMIN);
|
||||
checkGlobalAuth(currentUser, PrivPredicate.ADMIN_OR_NODE);
|
||||
}
|
||||
|
||||
SessionValue value = new SessionValue();
|
||||
@ -129,7 +129,7 @@ public class BaseController {
|
||||
}
|
||||
|
||||
if (checkAuth && !Env.getCurrentEnv().getAccessManager().checkGlobalPriv(sessionValue.currentUser,
|
||||
PrivPredicate.ADMIN)) {
|
||||
PrivPredicate.ADMIN_OR_NODE)) {
|
||||
// need to check auth and check auth failed
|
||||
return null;
|
||||
}
|
||||
|
||||
@ -54,6 +54,10 @@ public class PrivPredicate {
|
||||
public static final PrivPredicate ADMIN = PrivPredicate.of(PrivBitSet.of(Privilege.ADMIN_PRIV),
|
||||
Operator.OR);
|
||||
|
||||
public static final PrivPredicate ADMIN_OR_NODE = PrivPredicate.of(
|
||||
PrivBitSet.of(Privilege.ADMIN_PRIV, Privilege.NODE_PRIV),
|
||||
Operator.OR);
|
||||
|
||||
// load
|
||||
public static final PrivPredicate LOAD = PrivPredicate.of(PrivBitSet.of(Privilege.ADMIN_PRIV,
|
||||
Privilege.LOAD_PRIV),
|
||||
|
||||
Reference in New Issue
Block a user