sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-10-24 06:19:08 +02:00
Code Issues Packages Projects Releases Wiki Activity

Disable ownership on mobile

Browse Source
This commit is contained in:
Theodor S. Midtlien
2026-09-22 15:29:39 +02:00
parent a785814a3f
commit 9d40a09459
9 changed files with 70 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
client/internal/ipcauth/authz_gate_test.go
+13
View File
@@ -176,6 +176,19 @@ func TestAuthorizeCarriesTheTargetForAPrivilegedCaller(t *testing.T) {
assert.Equal(t, "/profiles/abcd1111.json", got)
}
// With ownership off, somebody else's live session is not a reason to refuse.
func TestAuthorizeIgnoresAHeldSessionWhenOwnershipDisabled(t *testing.T) {
t.Setenv(EnvDisableProfileOwnership, "true")
g := gateFor(t, stubState{
target: Target{Path: "/profiles/mine.json", Owned: true},
running: true,
holder: Principal{Kind: KindUID, Value: "4242"},
})
_, err := g.authorize(transportCtx(unprivUser, nil), servicePath+"Up", &proto.UpRequest{})
assert.NoError(t, err)
}
func TestAuthorizeBlamesAHeldSession(t *testing.T) {
g := gateFor(t, stubState{
target: Target{Path: "/profiles/mine.json", Owned: true},