Fix resource when call /projects/<project>

[orblazer]

Hello,
This PR fix resource when we call the root project url like /projects/{project_name_or_id}.
This is an update of #14753 because this issue is still present.

Affected issues : #14512

Affected endpoints :

• [GET,DELETE,PUT] /projects/{project_name_or_id}
• [GET] /projects/{project_name_or_id}/_deletable
• [GET] /projects/{project_name_or_id}/summary

Problem explanation

The bellowing code request resource /project/*

harbor/src/server/v2.0/handler/project.go

Line 324 in fd92efe

if err := a.RequireProjectAccess(ctx, projectNameOrID, rbac.ActionRead); err != nil {

But this following line generate /project/*/project

harbor/src/common/security/robot/context.go

Line 96 in fd92efe

Resource: types.Resource(fmt.Sprintf("%s/%s", p.Scope, a.Resource)),

Solution

So that PR fix that by creating custom case when we have request project resource and we have project kind.

Eg of permission enter in this case :

{
  "access": [
    { "action": "read", "resource": "project" }
  ],
  "kind": "project",
  "namespace": "*"
}

[flaviomoringa]

Hi,

we really need this to create some dashboards on our Backstage app using some information from each project. Any ETA to have this merged and added to a release?

Thanks

[OrlinVasilev]

@yanji09 @Vad1mo can you please review!

[Vad1mo]

@orblazer so far I am fine with this PR. Should we not rather address the root cause mentioned in PR #14753 and the respective fix #15431 that should have fix it?

[MinerYang]

Hi @orblazer ,

We have noticed that this pr is identical with #16381.
We would keep only one and keep tracking on this problem.

Thanks for your contribution!

[orblazer]

Hello @MinerYang,

This PR is similar logic (fix "invalid" permissions on API) but that doesn't affect same urls.