[Alerts] Filter project resources by permissions for list (#5532)

mlrun · May 8, 2024 · 2bd1a5d · 2bd1a5d
1 parent e2b0d85
commit 2bd1a5d
Showing 1 changed file with 13 additions and 1 deletion.
diff --git a/server/api/api/endpoints/alerts.py b/server/api/api/endpoints/alerts.py
@@ -120,10 +120,22 @@ async def list_alerts(
         auth_info,
     )
 
-    return await run_in_threadpool(
+    alerts = await run_in_threadpool(
         server.api.crud.Alerts().list_alerts, db_session, project
     )
 
+    alerts = await server.api.utils.auth.verifier.AuthVerifier().filter_project_resources_by_permissions(
+        mlrun.common.schemas.AuthorizationResourceTypes.alert,
+        alerts,
+        lambda alert: (
+            alert.project,
+            alert.name,
+        ),
+        auth_info,
+    )
+
+    return alerts
+
 
 @router.delete(
     "/{name}",