Bug #14841: [Ontology] The ontology import action is enabled for all tenants instead of being restricted to Tenant 1.

[Salimdev]

le profil gestion dans les tenants métiers doit permettre de mettre à jour les extensions du schéma mais pas de mettre à jour les vocabulaires de l'ontologie.

Cette mise à jour n'est possible que sur le tenant 1

Summary by CodeRabbit

• Bug Fixes
  • Ontology import access is now restricted to the configured administration tenant.
  • Permissions are evaluated after the tenant context is initialized, improving access-control accuracy.

[coderabbitai]

Warning

Review limit reached

Next included review available in 48 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 5fa03d0c-f4bd-493a-bd3d-f9e72d6fb056

📥 Commits

Reviewing files that changed from the base of the PR and between 4308976 and c393f07.

📒 Files selected for processing (2)

• ui/ui-frontend/projects/referential/src/app/ontology/ontology.component.spec.ts
• ui/ui-frontend/projects/referential/src/app/ontology/ontology.component.ts

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bug_14841

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[vitam-prg]

Checkmarx One – Scan Summary & Details – bce952a0-52e6-48c8-8e25-f4b3a4db18aa

---

Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Log_Forging	cas/cas-server/src/main/java/fr/gouv/vitamui/cas/authentication/LoginPwdAuthenticationHandler.java: 194

---

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

[github-actions]

Created backport PR for master_9.1.x:

• CP V9.1 - Bug #14841: [Ontology] The ontology import action is enabled for all tenants instead of being restricted to Tenant 1. #4008 with remaining conflicts!

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin backport-3992-to-master_9.1.x
git worktree add --checkout .worktree/backport-3992-to-master_9.1.x backport-3992-to-master_9.1.x
cd .worktree/backport-3992-to-master_9.1.x
git reset --hard HEAD^
git cherry-pick -x c393f07fc5340597e37f0a7c095270ef0d7946a8

[github-actions]

Created backport PR for master_9.0.x:

• CP V9.0 - Bug #14841: [Ontology] The ontology import action is enabled for all tenants instead of being restricted to Tenant 1. #4009 with remaining conflicts!

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin backport-3992-to-master_9.0.x
git worktree add --checkout .worktree/backport-3992-to-master_9.0.x backport-3992-to-master_9.0.x
cd .worktree/backport-3992-to-master_9.0.x
git reset --hard HEAD^
git cherry-pick -x c393f07fc5340597e37f0a7c095270ef0d7946a8