fix: GET rbac permission for settings

openobserve · May 13, 2024 · d9c7d63 · d9c7d63
1 parent 901e9bc
commit d9c7d63
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/common/utils/auth.rs b/src/common/utils/auth.rs
@@ -215,7 +215,7 @@ impl FromRequest for AuthExtractor {
  path_columns[0].to_string()
  }
  } else if url_len == 2 || (url_len > 2 && path_columns[1].starts_with("settings")) {
- if method.eq("GET") {
+ if method.eq("GET") && !path_columns[1].starts_with("settings") {
  method = "LIST".to_string();
  }
  format!(