diff --git a/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts b/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts index ec512ab99976..9572c89b1ece 100644 --- a/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts +++ b/src/core/server/workspaces/saved_objects/workspace_saved_objects_client_wrapper.ts @@ -190,6 +190,16 @@ export class WorkspaceSavedObjectsClientWrapper { objects: Array>, options: SavedObjectsBulkUpdateOptions = {} ) => { + const objectToBulkUpdate = await wrapperOptions.client.bulkGet(objects, options); + for (const object of objectToBulkUpdate.saved_objects) { + if (isWorkspacesLikeAttributes(object.attributes)) { + await this.validateMultiWorkspacesPermissions( + object.attributes.workspaces, + wrapperOptions.request, + WorkspacePermissionMode.Admin + ); + } + } return await wrapperOptions.client.bulkUpdate(objects, options); };