github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Fix a bug with ACL enforcement of reads on namespaced config entries. (#7239)

pull/7244/head
Matt Keeler 2020-02-07 08:30:40 -05:00 committed by GitHub
parent 9a220f3010
commit 444517080b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
agent/consul/config_endpoint.go
View File

@ -88,6 +88,8 @@ func (c *ConfigEntry) Get(args *structs.ConfigEntryQuery, reply *structs.ConfigE
if err != nil { if err != nil {
return err return err
} }
lookupEntry.GetEnterpriseMeta().Merge(&args.EnterpriseMeta)
if authz != nil && !lookupEntry.CanRead(authz) { if authz != nil && !lookupEntry.CanRead(authz) {
return acl.ErrPermissionDenied return acl.ErrPermissionDenied
} }