Signed-off-by: Bryan Frimin <bryan@probo.com>
This commit is contained in:
Bryan Frimin
2026-05-23 14:07:37 -07:00
parent 23af4caf43
commit bd04f1812a
84 changed files with 227 additions and 139 deletions

View File

@@ -387,6 +387,7 @@ func (a *Authorizer) evaluateMultiInTx(
// On failure, ErrAssumptionRequired is recorded only against items that
// did not opt out.
var assumptionErr error
if requiresAssumptionCheck {
err := a.checkAssumption(
ctx,
@@ -431,6 +432,7 @@ func (a *Authorizer) evaluateMultiInTx(
decisions := make([]error, len(params.Items))
itemAttrs := make([]policy.Attributes, len(params.Items))
for i, item := range params.Items {
resAttrs := resourceAttrsByResourceID[item.Resource]
if len(item.ResourceAttributes) > 0 {
@@ -438,6 +440,7 @@ func (a *Authorizer) evaluateMultiInTx(
maps.Copy(merged, item.ResourceAttributes)
resAttrs = merged
}
itemAttrs[i] = resAttrs
if assumptionErr != nil && !item.SkipAssumptionCheck {