Add permission checks

src/metabase/api/x_ray.clj

@@ -69,7 +69,7 @@
   "Get x-ray for a `Tield` with ID."
   [id]
   (->> id
-       ComputationJob
+       (api/read-check ComputationJob)
        async/result))
 
 (api/defendpoint GET "/segment/:id"

src/metabase/models/computation_job.clj

 (ns metabase.models.computation-job
-  (:require [metabase.models.interface :as i]
+  (:require [metabase.api.common :as api]
+            [metabase.models.interface :as i]
             [metabase.util :as u]
             [toucan.models :as models]))
 
 (models/defmodel ComputationJob :computation_job)
 
+(defn- creator?
+  [{:keys [creator_id]}]
+  (= creator_id api/*current-user-id*))
+
 (u/strict-extend (class ComputationJob)
   models/IModel
   (merge models/IModelDefaults
          {:types          (constantly {:status :keyword
                                        :type   :keyword})
-          :properties     (constantly {:timestamped? true})}))
+          :properties     (constantly {:timestamped? true})})
+  i/IObjectPermissions
+  (merge i/IObjectPermissionsDefaults
+         {:can-read?  creator?
+          :can-write? creator?}))