upstream/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-02-03 20:40:45 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions 9

UI: Correctly call resultant-acl endpoint when user root is root (#25766)

Browse source 
* Correctly call resultant-acl endpoint when user root is root

* check test differently

* Add changelog
This commit is contained in:
Chelsea Shaw 2024-03-05 11:36:00 -06:00 committed by GitHub
parent 02b6f8ec9b
commit cdd88d56af
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 29 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
changelog/25766.txt Normal file
View file

@ -0,0 +1,3 @@
```release-note:bug
ui: call resultant-acl without namespace header when user mounted at root namespace
```

2
ui/app/adapters/permissions.js
View file

@ -7,7 +7,7 @@ import ApplicationAdapter from './application';
export default ApplicationAdapter.extend({
query() {
const namespace = this.namespaceService.userRootNamespace || this.namespaceService.path;
const namespace = this.namespaceService.userRootNamespace ?? this.namespaceService.path;
return this.ajax(this.urlForQuery(), 'GET', { namespace });
},

25
ui/tests/unit/adapters/permissions-test.js
View file

@ -36,4 +36,29 @@ module('Unit | Adapter | permissions', function (hooks) {
});
await adapter.query();
});
test('it calls resultant-acl with the users root namespace when root', async function (assert) {
assert.expect(1);
const adapter = this.owner.lookup('adapter:permissions');
const nsService = this.owner.lookup('service:namespace');
const auth = this.owner.lookup('service:auth');
nsService.setNamespace('admin');
auth.setCluster('1');
auth.set('tokens', ['vault-_root_☃1']);
auth.setTokenData('vault-_root_☃1', { userRootNamespace: '', backend: { mountPath: 'token' } });
this.server.get('/sys/internal/ui/resultant-acl', (schema, request) => {
assert.false(
Object.keys(request.requestHeaders).includes('X-Vault-Namespace'),
'request is called without namespace'
);
return {
data: {
exact_paths: {},
glob_paths: {},
},
};
});
await adapter.query();
});
});