Commitdcf52f8

committed

fix policy with any_org partial

1 parent70651c6 commitdcf52f8Copy full SHA for dcf52f8

File tree

-7

lines changed

-7

lines changed

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -1329,9 +1329,9 @@ type authTestCase struct {`
`1329`	`1329`	`functestAuthorize(t*testing.T,namestring,subjectSubject,sets...[]authTestCase) {`
`1330`	`1330`	`t.Helper()`
`1331`	`1331`	`authorizer:=NewAuthorizer(prometheus.NewRegistry())`
`1332`		`-for_,cases:=rangesets {`
	`1332`	`+forsi,cases:=rangesets {`
`1333`	`1333`	`fori,c:=rangecases {`
`1334`		`-caseName:=fmt.Sprintf("%s/%d",name,i)`
	`1334`	`+caseName:=fmt.Sprintf("%s/%d-%d",name,si,i)`
`1335`	`1335`	`t.Run(caseName,func(t*testing.T) {`
`1336`	`1336`	`t.Parallel()`
`1337`	`1337`	`for_,a:=rangec.actions {`

Lines changed: 2 additions & 4 deletions

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -234,7 +234,7 @@ user_allow(roles) := num if {`
`234`	`234`	`input.object.owner!=""`
`235`	`235`	`# if there is an org, use org_member permissions instead`
`236`	`236`	`input.object.org_owner==""`
`237`		`-input.object.any_org==false`
	`237`	`+ notinput.object.any_org`
`238`	`238`	`input.subject.id= input.object.owner`
`239`	`239`
`240`	`240`	`allow:= {is_allowed\|`

Comments

(0)