aljaz/cyphernode
1
0
Fork 0
mirror of https://github.com/aljazceru/cyphernode.git synced 2025-12-17 20:55:04 +01:00
Code Issues Packages Projects Releases Wiki Activity

Correctly check groups access and upgrade to 0.2 instructions

Browse Source
This commit is contained in:
kexkey
2019-04-25 13:28:08 -04:00
committed by kexkey
parent 452ad78b32
commit 9b8db7d5de
3 changed files with 36 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
api_auth_docker/auth.sh
View File

@@ -106,10 +106,10 @@ verify_group()
eval ugroups='$ugroups_'$id
trace "[verify_group] user groups=${ugroups}"
if [ $context = "s" ]; then
if [ ${context} = "s" ]; then
# static files only accessible by a certain group
needed_group=${action}
elif [ $context = "v0" ]; then
elif [ ${context} = "v0" ]; then
# actual api calls
# It is so much faster to include the keys here instead of grep'ing the file for key.
. ./api.properties
@@ -118,10 +118,12 @@ verify_group()
trace "[verify_group] needed_group=${needed_group}"
case "${ugroups}" in
*${needed_group}*) trace "[verify_group] Access granted"; return 0 ;;
esac
# If needed_group is empty, the action was not found in api.propeties.
if [ -n "${needed_group}" ]; then
case "${ugroups}" in
*${needed_group}*) trace "[verify_group] Access granted"; return 0 ;;
esac
fi
trace "[verify_group] Access NOT granted"
return 1