wyl/hertzbeat
1
0
Fork 0
mirror of https://github.com/dromara/hertzbeat.git synced 2026-09-17 09:40:58 +00:00
Code Issues Projects Releases Wiki Activity

[fix] restrict monitoring template writes to admin (#4278)

Browse Source
This commit is contained in:
Duansg
2026-08-09 20:46:58 +08:00
committed by GitHub
parent 06078adc60
commit 1a7b45ec26
10 changed files with 137 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
script/docker-compose/hertzbeat-mysql-iotdb/conf/sureness.yml
+6
View File
@@ -22,6 +22,12 @@
resourceRole:
- /api/account/auth/refresh===post===[admin,user,guest]
- /api/apps/**===get===[admin,user,guest]
# the define yml routes persist the global collection templates
# post can only add a new type, put overwrites an existing one and immediately
# redispatches its collect job to every monitor already using it - hence admin only
- /api/apps/**===post===[admin,user]
- /api/apps/**===put===[admin]
- /api/apps/**===delete===[admin]
- /api/monitor/**===get===[admin,user,guest]
- /api/monitor/**===post===[admin,user]
- /api/monitor/**===put===[admin,user]
script/docker-compose/hertzbeat-mysql-tdengine/conf/sureness.yml
+6
View File
@@ -22,6 +22,12 @@
resourceRole:
- /api/account/auth/refresh===post===[admin,user,guest]
- /api/apps/**===get===[admin,user,guest]
# the define yml routes persist the global collection templates
# post can only add a new type, put overwrites an existing one and immediately
# redispatches its collect job to every monitor already using it - hence admin only
- /api/apps/**===post===[admin,user]
- /api/apps/**===put===[admin]
- /api/apps/**===delete===[admin]
- /api/monitor/**===get===[admin,user,guest]
- /api/monitor/**===post===[admin,user]
- /api/monitor/**===put===[admin,user]
script/docker-compose/hertzbeat-mysql-victoria-metrics/conf/sureness.yml
+6
View File
@@ -22,6 +22,12 @@
resourceRole:
- /api/account/auth/refresh===post===[admin,user,guest]
- /api/apps/**===get===[admin,user,guest]
# the define yml routes persist the global collection templates
# post can only add a new type, put overwrites an existing one and immediately
# redispatches its collect job to every monitor already using it - hence admin only
- /api/apps/**===post===[admin,user]
- /api/apps/**===put===[admin]
- /api/apps/**===delete===[admin]
- /api/monitor/**===get===[admin,user,guest]
- /api/monitor/**===post===[admin,user]
- /api/monitor/**===put===[admin,user]
script/docker-compose/hertzbeat-postgresql-greptimedb/conf/sureness.yml
+6
View File
@@ -22,6 +22,12 @@
resourceRole:
- /api/account/auth/refresh===post===[admin,user,guest]
- /api/apps/**===get===[admin,user,guest]
# the define yml routes persist the global collection templates
# post can only add a new type, put overwrites an existing one and immediately
# redispatches its collect job to every monitor already using it - hence admin only
- /api/apps/**===post===[admin,user]
- /api/apps/**===put===[admin]
- /api/apps/**===delete===[admin]
- /api/monitor/**===get===[admin,user,guest]
- /api/monitor/**===post===[admin,user]
- /api/monitor/**===put===[admin,user]
script/docker-compose/hertzbeat-postgresql-victoria-metrics/conf/sureness.yml
+6
View File
@@ -22,6 +22,12 @@
resourceRole:
- /api/account/auth/refresh===post===[admin,user,guest]
- /api/apps/**===get===[admin,user,guest]
# the define yml routes persist the global collection templates
# post can only add a new type, put overwrites an existing one and immediately
# redispatches its collect job to every monitor already using it - hence admin only
- /api/apps/**===post===[admin,user]
- /api/apps/**===put===[admin]
- /api/apps/**===delete===[admin]
- /api/monitor/**===get===[admin,user,guest]
- /api/monitor/**===post===[admin,user]
- /api/monitor/**===put===[admin,user]