apply workspace permission check when bulk creating object (opensearc…

…h-project#66) * feat: Apply workspace permission check when bulk creating object Signed-off-by: tygao <[email protected]> * chore: update bulk create function Signed-off-by: tygao <[email protected]> --------- Signed-off-by: tygao <[email protected]>
SuZhou-Joe · Aug 31, 2023 · 12a3cf2 · 12a3cf2
1 parent 3ed2a7c
commit 12a3cf2
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts b/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts
@@ -122,6 +122,12 @@ export class WorkspaceSavedObjectsClientWrapper {
       objects: Array<SavedObjectsBulkCreateObject<T>>,
       options: SavedObjectsCreateOptions = {}
     ): Promise<SavedObjectsBulkResponse<T>> => {
+      if (options.workspaces) {
+        await this.validateMultiWorkspacesPermissions(options.workspaces, wrapperOptions.request, [
+          PermissionMode.Write,
+          PermissionMode.Management,
+        ]);
+      }
       return await wrapperOptions.client.bulkCreate(objects, options);
     };