This is an automated email from the ASF dual-hosted git repository.

wakefu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/inlong.git


The following commit(s) were added to refs/heads/master by this push:
     new 45a6b1354e [INLONG-12094][Manager] Fix the problem of ordinary users 
can create new packages (#12095)
45a6b1354e is described below

commit 45a6b1354ef1eb0f3d5a55d135258e0ebc2375c5
Author: fuweng11 <[email protected]>
AuthorDate: Mon Mar 2 14:04:53 2026 +0800

    [INLONG-12094][Manager] Fix the problem of ordinary users can create new 
packages (#12095)
    
    Co-authored-by: wakefu <[email protected]>
---
 .../org/apache/inlong/manager/web/controller/ModuleController.java  | 6 ++++++
 .../org/apache/inlong/manager/web/controller/PackageController.java | 6 ++++++
 2 files changed, 12 insertions(+)

diff --git 
a/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/ModuleController.java
 
b/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/ModuleController.java
index bd001bdbf8..9ae78649db 100644
--- 
a/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/ModuleController.java
+++ 
b/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/ModuleController.java
@@ -30,6 +30,7 @@ import org.apache.inlong.manager.service.module.ModuleService;
 import io.swagger.annotations.Api;
 import io.swagger.annotations.ApiImplicitParam;
 import io.swagger.annotations.ApiOperation;
+import org.apache.shiro.authz.annotation.RequiresRoles;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.PathVariable;
@@ -38,6 +39,8 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestMethod;
 import org.springframework.web.bind.annotation.RestController;
 
+import static org.apache.inlong.manager.pojo.user.UserRoleCode.INLONG_ADMIN;
+
 /**
  * Inlong module control layer
  */
@@ -51,6 +54,7 @@ public class ModuleController {
 
     @RequestMapping(value = "/module/save", method = RequestMethod.POST)
     @ApiOperation(value = "Save inlong module")
+    @RequiresRoles(INLONG_ADMIN)
     public Response<Integer> save(@Validated(SaveValidation.class) 
@RequestBody ModuleRequest request) {
         String operator = LoginUserUtils.getLoginUser().getName();
         return Response.success(moduleService.save(request, operator));
@@ -58,6 +62,7 @@ public class ModuleController {
 
     @RequestMapping(value = "/module/update", method = RequestMethod.POST)
     @ApiOperation(value = "Update inlong module")
+    @RequiresRoles(INLONG_ADMIN)
     public Response<Boolean> update(@Validated(UpdateValidation.class) 
@RequestBody ModuleRequest request) {
         return Response.success(moduleService.update(request, 
LoginUserUtils.getLoginUser().getName()));
     }
@@ -77,6 +82,7 @@ public class ModuleController {
 
     @RequestMapping(value = "/module/delete/{id}", method = 
RequestMethod.DELETE)
     @ApiOperation(value = "Delete module config")
+    @RequiresRoles(INLONG_ADMIN)
     public Response<Boolean> delete(@PathVariable Integer id) {
         return Response.success(moduleService.delete(id, 
LoginUserUtils.getLoginUser().getName()));
     }
diff --git 
a/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/PackageController.java
 
b/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/PackageController.java
index 5db84705df..952462d727 100644
--- 
a/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/PackageController.java
+++ 
b/inlong-manager/manager-web/src/main/java/org/apache/inlong/manager/web/controller/PackageController.java
@@ -30,6 +30,7 @@ import 
org.apache.inlong.manager.service.module.PackageService;
 import io.swagger.annotations.Api;
 import io.swagger.annotations.ApiImplicitParam;
 import io.swagger.annotations.ApiOperation;
+import org.apache.shiro.authz.annotation.RequiresRoles;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.validation.annotation.Validated;
 import org.springframework.web.bind.annotation.PathVariable;
@@ -38,6 +39,8 @@ import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestMethod;
 import org.springframework.web.bind.annotation.RestController;
 
+import static org.apache.inlong.manager.pojo.user.UserRoleCode.INLONG_ADMIN;
+
 /**
  * Inlong package control layer
  */
@@ -51,6 +54,7 @@ public class PackageController {
 
     @RequestMapping(value = "/package/save", method = RequestMethod.POST)
     @ApiOperation(value = "Save inlong package")
+    @RequiresRoles(INLONG_ADMIN)
     public Response<Integer> save(@Validated(SaveValidation.class) 
@RequestBody PackageRequest request) {
         String operator = LoginUserUtils.getLoginUser().getName();
         return Response.success(packageService.save(request, operator));
@@ -58,6 +62,7 @@ public class PackageController {
 
     @RequestMapping(value = "/package/update", method = RequestMethod.POST)
     @ApiOperation(value = "Update inlong package")
+    @RequiresRoles(INLONG_ADMIN)
     public Response<Boolean> update(@Validated(UpdateValidation.class) 
@RequestBody PackageRequest request) {
         return Response.success(packageService.update(request, 
LoginUserUtils.getLoginUser().getName()));
     }
@@ -77,6 +82,7 @@ public class PackageController {
 
     @RequestMapping(value = "/package/delete/{id}", method = 
RequestMethod.DELETE)
     @ApiOperation(value = "Delete package config")
+    @RequiresRoles(INLONG_ADMIN)
     public Response<Boolean> delete(@PathVariable Integer id) {
         return Response.success(packageService.delete(id, 
LoginUserUtils.getLoginUser().getName()));
     }

Reply via email to