SwissDataScienceCenter / renku-data-services / 15637098311

86%

Build Type

push

github

Committed by web-flow

Commit Message

fix: Skip authz if admin is requesting data connectors (#887)

For reprovisioning it is necessary to get all entities. When selecting
data connectors from the db, there was always a call to authz to first
get all identifiers of resources the requesting user has read access
to. For internal service admins, this doesn't work, because they are
not modelled in authz. For admins in general the call can be
prevented, because admins are defined to see everything.

This change skips the authz call if the requesting user is an admin.
Additionally the search reprovisioning code uses an internal service
admin for doing its work when triggered internally (and not by an endpoint).

Run Details

23 of 24 new or added lines in 4 files covered. (95.83%)

2 existing lines in 1 file now uncovered.

21870 of 25127 relevant lines covered (87.04%)

1.53 hits per line