CLDSRV-424: api call updated with implicit deny logic

scality · Nov 7, 2023 · 849c926 · 849c926
1 parent ae770d0
commit 849c926
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/api/api.js b/lib/api/api.js
@@ -162,6 +162,11 @@ const api = {
                         // Any explicit deny rejects the current API call
                         log.trace('authorization denial from Vault');
                         return errors.AccessDenied;
+                    } else if (authResults[i].isAllowed) {
+                        // If the action is allowed, the result is not implicit
+                        // Deny.
+                        isImplicitDeny[authResults[i].action] = false;
+                        isOnlyImplicitDeny = false;
                     }
                     if (authResults[i].isAllowed) {
                         // If the action is allowed, the result is not implicit