could import config file without auth

[ghost]

Issue Description

Type: bug report

Describe what happened (or what feature you want)

with 1.1.3 and 1.1.0, any one could upload/import config file using api /cs/configs?import=true&namespace=,but without auth

Describe what you expected to happen

/cs/configs?import=true&namespace= api should be secured using auth token

[ly641921791]

I think the URL format like http://username:password@serverIp:8848/nacos/v1/xxx should solve the problem. This question is very similar to #1847

[zxcvbnmzsedr]

you can remove /v1/ns/** from nacos.security.ignore.urls,
https:/alibaba/nacos/blob/develop/console/src/main/java/com/alibaba/nacos/console/config/WebSecurityConfig.java

[nkorange]

Access control will be added in 1.2.0, which is tracked in #1105

[happystar22]

Access control will be added in 1.2.0, which is tracked in #1105

什么时候会上 1.2.0 呢？