Explorar o código

HUE-8087 [notebook] User with least privileges can access notebook app via URL

Roohi %!s(int64=7) %!d(string=hai) anos
pai
achega
447c847
Modificáronse 1 ficheiros con 1 adicións e 1 borrados
  1. 1 1
      desktop/libs/notebook/src/notebook/views.py

+ 1 - 1
desktop/libs/notebook/src/notebook/views.py

@@ -66,7 +66,7 @@ def notebooks(request):
 
 @check_document_access_permission()
 def notebook(request, is_embeddable=False):
-  if not SHOW_NOTEBOOKS.get():
+  if not SHOW_NOTEBOOKS.get() or not request.user.has_hue_permission(action="access", app='notebook'):
     return serve_403_error(request)
 
   notebook_id = request.GET.get('notebook', request.GET.get('editor'))