Fix implementation of isAuthorizedForClusterActions()

XMLWordPrintableJSON

    • Server Security
    • ALL
    • Server Security 2025-11-21, Server Security 2025-12-19
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      The code under AuthorizationSessionImpl::isAuthorizedForClusterActions() seems not ok since the expression of the if condition is later asserted in its negated form.

      if(A || B) {
          assert(!A);
           ...
      } // A refers to `kClusterActionsQuickList.isSupersetOf(actionSet)`
      

            Assignee:
            Varun Ravichandran
            Reporter:
            Silvia Surroca
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated: