Преглед на файлове

fix: bypass admin users to use dataset api with API key (#2072)

tags/0.4.9
Bowen Liang преди 1 година
родител
ревизия
e2c89a9487
No account linked to committer's email address
променени са 1 файла, в които са добавени 1 реда и са изтрити 1 реда
  1. 1
    1
      api/controllers/service_api/wraps.py

+ 1
- 1
api/controllers/service_api/wraps.py Целия файл

tenant_account_join = db.session.query(Tenant, TenantAccountJoin) \ tenant_account_join = db.session.query(Tenant, TenantAccountJoin) \
.filter(Tenant.id == api_token.tenant_id) \ .filter(Tenant.id == api_token.tenant_id) \
.filter(TenantAccountJoin.tenant_id == Tenant.id) \ .filter(TenantAccountJoin.tenant_id == Tenant.id) \
.filter(TenantAccountJoin.role == 'owner') \
.filter(TenantAccountJoin.role.in_(['owner', 'admin'])) \
.one_or_none() .one_or_none()
if tenant_account_join: if tenant_account_join:
tenant, ta = tenant_account_join tenant, ta = tenant_account_join

Loading…
Отказ
Запис