-
Type:
Bug
-
Resolution: Unresolved
-
Priority:
Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
Server Security
-
ALL
-
Server Security 2025-11-21, Server Security 2025-12-19
-
None
-
None
-
None
-
None
-
None
-
None
-
None
The code under AuthorizationSessionImpl::isAuthorizedForClusterActions() seems not ok since the expression of the if condition is later asserted in its negated form.
if(A || B) { assert(!A); ... } // A refers to `kClusterActionsQuickList.isSupersetOf(actionSet)`