Update DS Proxy to use RBAC action (#87517)

iam-team: Update DS Proxy to use RBAC action
This commit is contained in:
Aaron Godin
2024-05-21 08:05:16 -05:00
committed by GitHub
parent 410e3b17e9
commit 0072e4a92d
8 changed files with 56 additions and 7 deletions

View File

@ -122,7 +122,7 @@ func (proxy *PluginProxy) HandleRequest() {
}
func (proxy *PluginProxy) hasAccessToRoute(route *plugins.Route) bool {
useRBAC := proxy.features.IsEnabled(proxy.ctx.Req.Context(), featuremgmt.FlagAccessControlOnCall) && route.RequiresRBACAction()
useRBAC := proxy.features.IsEnabled(proxy.ctx.Req.Context(), featuremgmt.FlagAccessControlOnCall) && route.ReqAction != ""
if useRBAC {
hasAccess := ac.HasAccess(proxy.accessControl, proxy.ctx)(ac.EvalPermission(route.ReqAction))
if !hasAccess {