[pbs-devel] [PATCH proxmox-backup] fix: config: remove duplicate privilege lookup in cached_user_info
Wolfgang Bumiller
w.bumiller at proxmox.com
Fri Jun 10 10:52:56 CEST 2022
Any reason for the "fix: " prefix in the commit message, though? This
just seems to remove something redundant and not actually fix an issue?
Or am I missing something?
Code-wise it seems fine, so I'd apply it, but I'd drop the 'fix' prefix?
On Fri, Jun 10, 2022 at 10:13:25AM +0200, Stefan Sterz wrote:
> `lookup_privs` just uses `lookup_privs_details` but ignores the
> propagated privileges it returns. thus, the lookup here is redundant
> as it is immediately followed by a call to `lookup_privs_details` with
> the same parameters.
>
> Signed-off-by: Stefan Sterz <s.sterz at proxmox.com>
> ---
> pbs-config/src/cached_user_info.rs | 1 -
> 1 file changed, 1 deletion(-)
>
> diff --git a/pbs-config/src/cached_user_info.rs b/pbs-config/src/cached_user_info.rs
> index 8dd2375a..b9534b80 100644
> --- a/pbs-config/src/cached_user_info.rs
> +++ b/pbs-config/src/cached_user_info.rs
> @@ -170,7 +170,6 @@ impl CachedUserInfo {
> if auth_id.is_token() {
> // limit privs to that of owning user
> let user_auth_id = Authid::from(auth_id.user().clone());
> - privs &= self.lookup_privs(&user_auth_id, path);
> let (owner_privs, owner_propagated_privs) =
> self.lookup_privs_details(&user_auth_id, path);
> privs &= owner_privs;
> --
> 2.30.2
More information about the pbs-devel
mailing list