-
[OPIK-5535] Fix 403 on get_blueprint() when resolving project by name (#6051)
发布于
2026-04-02 12:06:29 +00:00 - [OPIK-5535] Add projects/retrieve to PUBLIC_ENDPOINTS whitelist
The SDK's get_blueprint() resolves project name to ID via
POST /v1/private/projects/retrieve, but this endpoint was missing
from the PUBLIC_ENDPOINTS whitelist — causing 403 for users with
viewer/public access. The equivalent datasets/retrieve endpoint
was already whitelisted.- [OPIK-5535] Enforce visibility in retrieveByName and add cross-workspace test
Add verifyVisibility check to ProjectService.retrieveByName(),
consistent with getById(). Without this, the newly public
projects/retrieve endpoint would expose private projects to
unauthenticated users falling back to Visibility.PUBLIC.Add test verifying that retrieving a project by name from a different
workspace returns 404.下载附件