rickchengx opened a new pull request, #12830: URL: https://github.com/apache/dolphinscheduler/pull/12830
<!--Thanks very much for contributing to Apache DolphinScheduler. Please review https://dolphinscheduler.apache.org/en-us/community/development/pull-request.html before opening a pull request.--> ## Purpose of the pull request * close: #12828 Currently, User can query unauthorized datasource as below 1. send GET request `.../dolphinscheduler/dasources/<id>` 2. and get the datasource without permission check <img width="1916" alt="截屏2022-11-09 11 21 47" src="https://user-images.githubusercontent.com/38122586/200731130-acd4d848-13a3-4ced-9899-2994c2ac741c.png";> ## Brief change log Add permission check when query specific datasource ## Verify this pull request covered by UT -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
![https://user-images.githubusercontent.com/38122586/200731130-acd4d848-13a3-4ced-9899-2994c2ac741c.png"](https://user-images.githubusercontent.com/38122586/200731130-acd4d848-13a3-4ced-9899-2994c2ac741c.png"){kind=link}