bugfix: share api bug fix

Author: tianlu-root

server/src/main/java/datart/server/service/impl/ShareServiceImpl.java

@@ -203,7 +203,8 @@ public ShareVizDetail getShareViz(ShareToken shareToken) {
 
     @Override
     public Dataframe execute(ShareToken shareToken, ViewExecuteParam executeParam) throws Exception {
-        validateExecutePermission(shareToken.getAuthorizedToken(), executeParam);
+        ShareAuthorizedToken shareAuthorizedToken = validateExecutePermission(shareToken.getAuthorizedToken(), executeParam);
+        getSecurityManager().runAs(shareAuthorizedToken.getPermissionBy());
         return dataProviderService.execute(executeParam, false);
     }
 
@@ -332,14 +333,15 @@ public boolean update(BaseUpdateParam updateParam) {
         return 1 == shareMapper.updateByPrimaryKey(update);
     }
 
-    private void validateExecutePermission(String authorizedToken, ViewExecuteParam executeParam) {
+    private ShareAuthorizedToken validateExecutePermission(String authorizedToken, ViewExecuteParam executeParam) {
         if (StringUtils.isBlank(authorizedToken)) {
             Exceptions.tr(PermissionDeniedException.class, "message.provider.execute.permission.denied");
         }
         ShareAuthorizedToken shareAuthorizedToken = AESUtil.decrypt(authorizedToken, Application.getTokenSecret(), ShareAuthorizedToken.class);
         if (!ResourceType.VIEW.equals(shareAuthorizedToken.getVizType()) || !shareAuthorizedToken.getVizId().equals(executeParam.getViewId())) {
             Exceptions.tr(PermissionDeniedException.class, "message.provider.execute.permission.denied");
         }
+        return shareAuthorizedToken;
     }
 
     private void validateExpiration(ShareAuthorizedToken share) {