mirror of
https://github.com/minio/minio.git
synced 2025-11-07 21:02:58 -05:00
handle missing LDAP normalization in SetPolicy() API (#19465)
This commit is contained in:
24
cmd/iam.go
24
cmd/iam.go
@@ -1602,6 +1602,30 @@ func (sys *IAMSys) PolicyDBSet(ctx context.Context, name, policy string, userTyp
|
||||
return updatedAt, errServerNotInitialized
|
||||
}
|
||||
|
||||
if sys.LDAPConfig.Enabled() {
|
||||
if isGroup {
|
||||
var foundGroupDN string
|
||||
if foundGroupDN, err = sys.LDAPConfig.GetValidatedGroupDN(name); err != nil {
|
||||
iamLogIf(ctx, err)
|
||||
return
|
||||
} else if foundGroupDN == "" {
|
||||
err = errNoSuchGroup
|
||||
return
|
||||
}
|
||||
name = foundGroupDN
|
||||
} else {
|
||||
var foundUserDN string
|
||||
if foundUserDN, err = sys.LDAPConfig.GetValidatedDNForUsername(name); err != nil {
|
||||
iamLogIf(ctx, err)
|
||||
return
|
||||
} else if foundUserDN == "" {
|
||||
err = errNoSuchUser
|
||||
return
|
||||
}
|
||||
name = foundUserDN
|
||||
}
|
||||
}
|
||||
|
||||
updatedAt, err = sys.store.PolicyDBSet(ctx, name, policy, userType, isGroup)
|
||||
if err != nil {
|
||||
return
|
||||
|
||||
Reference in New Issue
Block a user