-
Notifications
You must be signed in to change notification settings - Fork 3.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix(authz)!: prunning: unable to execute authorization #10633
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We still need to be able to remove expired grants.
if req.MsgTypeUrl != "" { | ||
authorization, expiration := k.GetCleanAuthorization(ctx, grantee, granter, req.MsgTypeUrl) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
so why we don't want to clean authorization if it's expired?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Expired authorizations are not pruned from the state. see 8311#issuecomment.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks. I totally forgot about that issue.
So, let's either decide here what shall we do with expired authorization or create a new issue. |
One solution I have in mind is following:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Let's decide if we really want to remove the grant pruning or fix it. I would prefer to fix it.
I'm blocking this PR only to clarify what we want to achieve, it's totally fine to schedule a next task and re-enable pruning, or do it here (to be honest, I think we should do it here, because this PR does only a temporal solutions). |
@robert-zaremba let's merge this PR. I've raised a follow-up PR(#10714) for pruning expired authorizations. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
Closing in favor of #10714 |
Description
Closes: #10611
Author Checklist
All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.
I have...
!
to the type prefix if API or client breaking changeCHANGELOG.md
Reviewers Checklist
All items are required. Please add a note if the item is not applicable and please add
your handle next to the items reviewed if you only reviewed selected items.
I have...
!
in the type prefix if API or client breaking change