aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorhcpp <hcpp@ydb.tech>2022-09-14 19:49:03 +0300
committerhcpp <hcpp@ydb.tech>2022-09-14 19:49:03 +0300
commit142f320dd0c9cc66e7accf199ae4fc50ef4d353e (patch)
tree1f86a7d554da5a6d72cbb8f4cc9d39947cf66df8
parent2aa3f5defdef6ce85bd3599cc768c69ca8b4c950 (diff)
downloadydb-142f320dd0c9cc66e7accf199ae4fc50ef4d353e.tar.gz
connection/query permissions bug has been fixed for modification case
-rw-r--r--ydb/services/fq/grpc_service.cpp4
1 files changed, 4 insertions, 0 deletions
diff --git a/ydb/services/fq/grpc_service.cpp b/ydb/services/fq/grpc_service.cpp
index 867714214d..c1f519e8d8 100644
--- a/ydb/services/fq/grpc_service.cpp
+++ b/ydb/services/fq/grpc_service.cpp
@@ -89,6 +89,8 @@ void TGRpcFederatedQueryService::SetupIncomingRequests(NGrpc::TLoggerPtr logger)
}
if (request.content().acl().visibility() == FederatedQuery::Acl::SCOPE) {
permissions.push_back(NPerms::Required("yq.resources.managePublic"));
+ } else {
+ permissions.push_back(NPerms::Optional("yq.resources.managePublic"));
}
return permissions;
}};
@@ -166,6 +168,8 @@ void TGRpcFederatedQueryService::SetupIncomingRequests(NGrpc::TLoggerPtr logger)
};
if (request.content().acl().visibility() == FederatedQuery::Acl::SCOPE) {
permissions.push_back(NPerms::Required("yq.resources.managePublic"));
+ } else {
+ permissions.push_back(NPerms::Optional("yq.resources.managePublic"));
}
return permissions;
}};