awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-11 14:28:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

get rid of resource from policies, only using account path

Browse Source
This commit is contained in:
x032205
2025-12-06 19:48:24 -05:00
parent 6c7d708c98
commit c60c397e6a
2 changed files with 0 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/services/approval-policy/pam-access/pam-access-policy-factory.ts
-5
View File
@@ -29,11 +29,6 @@ export const pamAccessPolicyFactory: TApprovalResourceFactory<
for (const policy of policies) { for (const policy of policies) {
const p = policy as TPamAccessPolicy; const p = policy as TPamAccessPolicy;
for (const c of p.conditions.conditions) { for (const c of p.conditions.conditions) {
if (c.resourceIds && !c.resourceIds.some((r) => r === inputs.resourceId)) {
// eslint-disable-next-line no-continue
continue;
}
// Find the most specific path pattern // Find the most specific path pattern
// TODO(andrey): Make matching logic more advanced by accounting for wildcard positions // TODO(andrey): Make matching logic more advanced by accounting for wildcard positions
for (const pathPattern of c.accountPaths) { for (const pathPattern of c.accountPaths) {
backend/src/services/approval-policy/pam-access/pam-access-policy-schemas.ts
-3
View File
@@ -12,14 +12,12 @@ import {
// Inputs // Inputs
export const PamAccessPolicyInputsSchema = z.object({ export const PamAccessPolicyInputsSchema = z.object({
resourceId: z.string().uuid(),
accountPath: z.string() accountPath: z.string()
}); });
// Conditions // Conditions
export const PamAccessPolicyConditionsSchema = z export const PamAccessPolicyConditionsSchema = z
.object({ .object({
resourceIds: z.string().uuid().array().optional(),
accountPaths: z.string().array() // TODO(andrey): Add path & wildcard validation accountPaths: z.string().array() // TODO(andrey): Add path & wildcard validation
}) })
.array(); .array();
@@ -44,7 +42,6 @@ export const PamAccessPolicyConstraintsSchema = z.object({
// Request Data // Request Data
export const PamAccessPolicyRequestDataSchema = z.object({ export const PamAccessPolicyRequestDataSchema = z.object({
resourceId: z.string().uuid(),
accountPath: z.string(), accountPath: z.string(),
accessDuration: DurationSchema accessDuration: DurationSchema
}); });