catalog-backend: fix getResources
The getResources method in catalog-backend should use the unauthorizedEntitiesCatalog to load resources, otherwise we end up authorizing access to entities during application of conditions. Signed-off-by: MT Lewis <mtlewis@users.noreply.github.com>
This commit is contained in:
@@ -417,7 +417,7 @@ export class NextCatalogBuilder {
|
||||
const permissionIntegrationRouter = createPermissionIntegrationRouter({
|
||||
resourceType: RESOURCE_TYPE_CATALOG_ENTITY,
|
||||
getResources: async (resourceRefs: string[]) => {
|
||||
const { entities } = await entitiesCatalog.entities({
|
||||
const { entities } = await unauthorizedEntitiesCatalog.entities({
|
||||
filter: {
|
||||
anyOf: resourceRefs.map(resourceRef => {
|
||||
const { kind, namespace, name } = parseEntityRef(resourceRef);
|
||||
|
||||
Reference in New Issue
Block a user