Evaluator API fix

atlanhq · Feb 1, 2024 · aac4c53 · aac4c53
1 parent eee8eac
commit aac4c53
Showing 1 changed file with 7 additions and 4 deletions.
diff --git a/repository/src/main/java/org/apache/atlas/authorizer/AuthorizerUtils.java b/repository/src/main/java/org/apache/atlas/authorizer/AuthorizerUtils.java
@@ -93,14 +93,17 @@ public static void verifyAccess(AtlasEntityHeader entityHeader, AtlasPrivilege a
 
     public static void verifyAccessForEvaluator(AtlasEntityHeader entityHeader, AtlasPrivilege action) throws AtlasBaseException {
         if (!useAbacAuthorizer) {
-            //AtlasAuthorizationUtils.verifyAccess(new AtlasEntityAccessRequest(typeRegistry, action, entityHeader, new AtlasClassification(entityHeader.getClassifications().get(0))));
             AtlasClassification classification = CollectionUtils.isNotEmpty(entityHeader.getClassifications()) ? entityHeader.getClassifications().get(0) : null;
             AtlasAuthorizationUtils.verifyAccess(new AtlasEntityAccessRequest(typeRegistry, action, entityHeader, classification));
         } else {
-            if (StringUtils.isNotEmpty(entityHeader.getGuid())) {
-                NewAuthorizerUtils.verifyAccess(entityHeader, action);
+            if (action == ENTITY_CREATE) {
+                AuthorizerUtils.verifyAccess(entityHeader, ENTITY_CREATE);
             } else {
-                NewAuthorizerUtils.verifyAccessForEvaluator(entityHeader, action);
+                if (StringUtils.isNotEmpty(entityHeader.getGuid())) {
+                    NewAuthorizerUtils.verifyAccess(entityHeader, action);
+                } else {
+                    NewAuthorizerUtils.verifyAccessForEvaluator(entityHeader, action);
+                }
             }
         }
     }