Add permission check in get_data_filters

data-dot-all · Nov 22, 2024 · 48dbf68 · 48dbf68
1 parent e47f079
commit 48dbf68
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/backend/dataall/modules/shares_base/services/share_item_service.py b/backend/dataall/modules/shares_base/services/share_item_service.py
@@ -258,6 +258,9 @@ def update_filters_table_share_item(uri: str, data: dict):
             raise ObjectNotFound('ShareObjectItem', uri)
 
     @staticmethod
+    @ResourcePolicyService.has_resource_permission(
+        GET_SHARE_OBJECT, parent_resource=_get_share_uri_from_item_filter_uri
+    )
     def get_share_item_data_filters(uri: str):
         with get_context().db_engine.scoped_session() as session:
             return ShareObjectItemRepository.get_share_item_filter_by_uri(session, uri)