Skip to content

Commit aeaa111

Browse files
committed
add auth
1 parent 904a306 commit aeaa111

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

fe/fe-core/src/main/java/org/apache/doris/nereids/trees/plans/commands/AlterSystemRenameComputeGroupCommand.java

+9
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,8 @@
2222
import org.apache.doris.cloud.system.CloudSystemInfoService;
2323
import org.apache.doris.common.AnalysisException;
2424
import org.apache.doris.common.DdlException;
25+
import org.apache.doris.common.ErrorCode;
26+
import org.apache.doris.mysql.privilege.PrivPredicate;
2527
import org.apache.doris.nereids.trees.plans.PlanType;
2628
import org.apache.doris.nereids.trees.plans.visitor.PlanVisitor;
2729
import org.apache.doris.qe.ConnectContext;
@@ -43,6 +45,13 @@ public AlterSystemRenameComputeGroupCommand(String originalName, String newName)
4345
}
4446

4547
private void validate() throws AnalysisException {
48+
// check admin or root auth, can rename
49+
if (!Env.getCurrentEnv().getAccessManager()
50+
.checkGlobalPriv(ConnectContext.get(), PrivPredicate.ADMIN_OR_NODE)) {
51+
String message = ErrorCode.ERR_SPECIFIC_ACCESS_DENIED_ERROR.formatErrorMsg(
52+
PrivPredicate.ADMIN_OR_NODE.getPrivs().toString());
53+
throw new org.apache.doris.nereids.exceptions.AnalysisException(message);
54+
}
4655
if (Strings.isNullOrEmpty(originalName) || Strings.isNullOrEmpty(newName)) {
4756
throw new AnalysisException("rename group requires non-empty or non-empty name");
4857
}

0 commit comments

Comments
 (0)