fix(api-gateway): data scope check (#9264)

cube-js · Feb 25, 2025 · 75095e1 · 75095e1
1 parent 57932fc
commit 75095e1
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/packages/cubejs-api-gateway/src/gateway.ts b/packages/cubejs-api-gateway/src/gateway.ts
@@ -385,6 +385,7 @@ class ApiGateway {
         res.setHeader('Transfer-Encoding', 'chunked');
 
         try {
+          await this.assertApiScope('data', req.context?.securityContext);
           await this.sqlServer.execSql(req.body.query, res, req.context?.securityContext);
         } catch (e: any) {
           this.handleError({