[cherry-pick] fix robot update issue (#17260)

Signed-off-by: Wang Yan <wangyan@vmware.com>
This commit is contained in:
Wang Yan 2022-07-29 15:40:55 +08:00 committed by GitHub
parent 3897471486
commit 30eaf1cc7c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -298,17 +298,18 @@ func (rAPI *robotAPI) updateV2Robot(ctx context.Context, params operation.Update
return err
}
projectID, err := getProjectID(ctx, params.Robot.Permissions[0].Namespace)
if err != nil {
if r.Level != robot.LEVELSYSTEM {
projectID, err := getProjectID(ctx, params.Robot.Permissions[0].Namespace)
if err != nil {
return err
}
if r.ProjectID != projectID {
return errors.BadRequestError(nil).WithMessage("cannot update the project id of robot")
}
}
if err := rAPI.requireAccess(ctx, params.Robot.Level, params.Robot.Permissions[0].Namespace, rbac.ActionUpdate); err != nil {
return err
}
if r.Level != robot.LEVELSYSTEM && r.ProjectID != projectID {
return errors.BadRequestError(nil).WithMessage("cannot update the project id of robot")
}
if err := rAPI.requireAccess(ctx, params.Robot.Level, projectID, rbac.ActionUpdate); err != nil {
return err
}
if params.Robot.Level != r.Level || params.Robot.Name != r.Name {
return errors.BadRequestError(nil).WithMessage("cannot update the level or name of robot")
}