feat: Apply workspace permission check when bulk creating object

Signed-off-by: tygao <tygao@amazon.com>
raintygao · Jul 28, 2023 · 01e21a2 · 01e21a2
1 parent efbb1ce
commit 01e21a2
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts b/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts
@@ -96,6 +96,16 @@ export class WorkspaceSavedObjectsClientWrapper {
       objects: Array<SavedObjectsBulkCreateObject<T>>,
       options: SavedObjectsCreateOptions = {}
     ): Promise<SavedObjectsBulkResponse<T>> => {
+      if (options.workspaces) {
+        options.workspaces = options.workspaces.filter(
+          async (workspaceId) =>
+            await this.permissionControl.validate(
+              workspaceId,
+              WorkspacePermissionMode.Admin,
+              wrapperOptions.request
+            )
+        );
+      }
       return await wrapperOptions.client.bulkCreate(objects, options);
     };