Account for case when token's scope does not contain type/resource/ac…

…tion. closes pulp#509
ipanova · Jan 22, 2022 · a94b7ff · a94b7ff
1 parent a9f61cc
commit a94b7ff
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGES/509.bugfix b/CHANGES/509.bugfix
@@ -0,0 +1 @@
+Account for case when token's scope does not contain type/resource/action.
diff --git a/pulp_container/app/authorization.py b/pulp_container/app/authorization.py
@@ -133,7 +133,7 @@ def determine_access(self):
                 endpoint.
 
         """
-        if not self.scope:
+        if not self.scope or self.scope.count(":") != 2:
             return []
 
         typ, name, actions = self.scope.split(":")
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Account for case when token's scope does not contain type/resource/action.