commit 65a62b05369a2dbb75d26971dc071b28b1119331
author nixonrodrigues <nixon@apache.org> Fri Dec 06 14:49:21 2019 +0530
committer nixonrodrigues <nixon@apache.org> Fri Dec 06 15:02:46 2019 +0530
tree 9e0aa1d36dd9b8fecdfe1cc3f0c2d1696c005f97
parent 1e0962d70008cccfb9d4f1db624963faa74d0c19

ATLAS-3550 :- Add authorize check for  partialUpdateEntityAttrByGuid API call

repository/src/main/java/org/apache/atlas/repository/store/graph/v2/AtlasEntityStoreV2.java

diff --git a/repository/src/main/java/org/apache/atlas/repository/store/graph/v2/AtlasEntityStoreV2.java b/repository/src/main/java/org/apache/atlas/repository/store/graph/v2/AtlasEntityStoreV2.java
index bc4cc8b..ea5e6ab 100644
--- a/repository/src/main/java/org/apache/atlas/repository/store/graph/v2/AtlasEntityStoreV2.java
+++ b/repository/src/main/java/org/apache/atlas/repository/store/graph/v2/AtlasEntityStoreV2.java
@@ -376,6 +376,8 @@
 
         entity.setGuid(guid);
 
+        AtlasAuthorizationUtils.verifyAccess(new AtlasEntityAccessRequest(typeRegistry, AtlasPrivilege.ENTITY_UPDATE, new AtlasEntityHeader(entity)), "update entity ByUniqueAttributes");
+
         return createOrUpdate(new AtlasEntityStream(updatedEntityInfo), true, false);
     }
 
@@ -391,6 +393,8 @@
         AtlasEntityType   entityType = (AtlasEntityType) typeRegistry.getType(entity.getTypeName());
         AtlasAttribute    attr       = entityType.getAttribute(attrName);
 
+        AtlasAuthorizationUtils.verifyAccess(new AtlasEntityAccessRequest(typeRegistry, AtlasPrivilege.ENTITY_UPDATE, entity), "update entity ByUniqueAttributes : guid=", guid );
+
         if (attr == null) {
             attr = entityType.getRelationshipAttribute(attrName, AtlasEntityUtil.getRelationshipType(attrValue));