Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Backport of client: fix role permission issue with duplicate policies. into release/1.4.x #18446

Merged
merged 1 commit into from
Sep 11, 2023
Merged

Backport of client: fix role permission issue with duplicate policies. into release/1.4.x #18446

merged 1 commit into from
Sep 11, 2023

Commits on Sep 11, 2023

  1. client: fix role permission issue with duplicate policies. (#18419) 

    This change deduplicates the ACL policy list generated from ACL
roles referenced within an ACL token on the client.

Previously the list could contain duplicates, which would cause
erronous permission denied errors when calling client related RPC/
HTTP API endpoints. This is because the client calls the ACL get
policies endpoint which subsequently ensures the caller has
permission to view the ACL policies. This check is performed by
comparing the requested list args with the policies referenced by
the caller ACL token. When a duplicate is present, this check
fails, as the check must ensure the slices match exactly.
    @jrasell
    jrasell committed Sep 11, 2023
    Configuration menu
    Copy the full SHA
    fe0be62 View commit details
    Browse the repository at this point in the history