From 1d1b2cd1da2d82287052eea84dc212b58a3b9b11 Mon Sep 17 00:00:00 2001
From: shangeyao <shangeyao@qq.com>
Date: Sat, 27 Jun 2026 16:19:55 +0800
Subject: [PATCH] [Console] Add RBAC checks to SettingController get and
 checkHadoop

Require setting:view permission for single-key reads and Hadoop checks.

Generated-by: Cursor
Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .../streampark/console/core/controller/SettingController.java   | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java b/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java
index 4b3c751f47..e16f5ae3c9 100644
--- a/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java
+++ b/streampark-console/streampark-console-service/src/main/java/org/apache/streampark/console/core/controller/SettingController.java
@@ -56,6 +56,7 @@ public RestResponse all() {
     }
 
     @PostMapping("get")
+    @RequiresPermissions("setting:view")
     public RestResponse get(String key) {
         Setting setting = settingService.get(key);
         return RestResponse.success(setting);
@@ -111,6 +112,7 @@ public RestResponse updateEmail(SenderEmail senderEmail) {
     }
 
     @PostMapping("check/hadoop")
+    @RequiresPermissions("setting:view")
     public RestResponse checkHadoop() throws IOException {
         HadoopUtils.hdfs().getStatus();
         return RestResponse.success(true);