attack can change the immutable name and type of nodes

1 admin create a node

2 add user1 as one owner

3 login as user1

4 user1 edit the the node

5 user1 finds that the name and type can not be changed.

6 user1 still edit the node and using the burpsuit to hijack the request

7 the request content can be like

{“name”:“te1”,“type”:“CLICKHOUSE”,“inCharges”:“user1,admin”,“description”:“123”,“username”:“admin”,“token”:null,“url”:“127.0.0.1:8080”,“id”:1,“version”:5}

8 change the name as te2(we can also change type)

9 result shows that the the name was successfully changed as te2