From ffbeaa1af58a4741079db66d4c105c33c62048d0 Mon Sep 17 00:00:00 2001
From: tygao <tygao@amazon.com>
Date: Fri, 28 Jul 2023 16:44:53 +0800
Subject: [PATCH] feat: Apply workspace permission check when bulk creating
 object

Signed-off-by: tygao <tygao@amazon.com>
---
 .../workspace_saved_objects_client_wrapper.ts          | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts b/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts
index 0e4452dc23e3..59b9811e92f5 100644
--- a/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts
+++ b/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts
@@ -122,6 +122,16 @@ export class WorkspaceSavedObjectsClientWrapper {
       objects: Array<SavedObjectsBulkCreateObject<T>>,
       options: SavedObjectsCreateOptions = {}
     ): Promise<SavedObjectsBulkResponse<T>> => {
+      if (options.workspaces) {
+        options.workspaces = options.workspaces.filter(
+          async (workspaceId) =>
+            await this.permissionControl.validate(
+              workspaceId,
+              WorkspacePermissionMode.Admin,
+              wrapperOptions.request
+            )
+        );
+      }
       return await wrapperOptions.client.bulkCreate(objects, options);
     };