Minor: skip domain check for bots and admin

open-metadata · Nov 22, 2024 · 8c949b7 · 8c949b7
1 parent 17ffdf9
commit 8c949b7
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/...vice/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java b/...vice/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java
@@ -84,7 +84,9 @@ public static void hasDomainPermission(
       @NonNull ResourceContextInterface resourceContext,
       OperationContext operationContext) {
     // If the Resource Does not belong to any Domain, then evaluate via other permissions
-    if (!nullOrEmpty(resourceContext.getDomain())) {
+    if (!nullOrEmpty(resourceContext.getDomain())
+        && !subjectContext.isAdmin()
+        && !subjectContext.isBot()) {
       EntityReference domain = resourceContext.getDomain();
       if (!subjectContext.hasDomain(domain)) {
         throw new AuthorizationException(