RBAC: No need to filter permissions on cache hit (#87941)

pull/87965/head
Gabriel MABILLE 1 year ago committed by GitHub
parent 431fdd4bab
commit e7d5622969
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 11
      pkg/services/accesscontrol/acimpl/service.go

@ -578,17 +578,10 @@ func (s *Service) searchUserPermissionsFromCache(orgID int64, searchOptions acce
return nil, false
}
metrics.MAccessSearchUserPermissionsCacheUsage.WithLabelValues(accesscontrol.CacheHit).Inc()
s.log.Debug("Using cached permissions", "key", key)
filteredPermissions := make([]accesscontrol.Permission, 0)
for _, permission := range permissions.([]accesscontrol.Permission) {
if PermissionMatchesSearchOptions(permission, &searchOptions) {
filteredPermissions = append(filteredPermissions, permission)
}
}
metrics.MAccessSearchUserPermissionsCacheUsage.WithLabelValues(accesscontrol.CacheHit).Inc()
return filteredPermissions, true
return permissions.([]accesscontrol.Permission), true
}
func PermissionMatchesSearchOptions(permission accesscontrol.Permission, searchOptions *accesscontrol.SearchOptions) bool {

Loading…
Cancel
Save