发布

  • [OPIK-5535] Fix 403 on get_blueprint() when resolving project by name (#6051)

    frostbyte_neo 发布于 2026-04-02 12:06:29 +00:00

    • [OPIK-5535] Add projects/retrieve to PUBLIC_ENDPOINTS whitelist

    The SDK's get_blueprint() resolves project name to ID via
    POST /v1/private/projects/retrieve, but this endpoint was missing
    from the PUBLIC_ENDPOINTS whitelist — causing 403 for users with
    viewer/public access. The equivalent datasets/retrieve endpoint
    was already whitelisted.

    • [OPIK-5535] Enforce visibility in retrieveByName and add cross-workspace test

    Add verifyVisibility check to ProjectService.retrieveByName(),
    consistent with getById(). Without this, the newly public
    projects/retrieve endpoint would expose private projects to
    unauthenticated users falling back to Visibility.PUBLIC.

    Add test verifying that retrieving a project by name from a different
    workspace returns 404.

    下载附件