DeforaNetworks/corteza
DeforaNetworks/corteza
3
0
Fork 0
Code

Fix sink script execution by assurring sufficient ctx credentials

Browse Source
This commit is contained in:
Tomaž Jerman 2021-10-07 14:50:49 +02:00
parent a4b9518cde
commit dc56f8a624
1 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
pkg/corredor/service.go
View File

@ -658,6 +658,14 @@ func (svc service) exec(ctx context.Context, script string, runAs string, args S
token string
)
// Returns context with identity set to service user
//
// Current user (identity in the context) might not have
// sufficient privileges to load info about invoker and runner
sysUserCtx := func() context.Context {
return auth.SetIdentityToContext(ctx, auth.ServiceUser())
}
log.Debug("triggered")
if encodedEvent, err = args.Encode(); err != nil {
@ -683,7 +691,7 @@ func (svc service) exec(ctx context.Context, script string, runAs string, args S
return fmt.Errorf("could not run automation script without configured user service")
}
invoker, err = svc.users.FindByAny(ctx, i)
invoker, err = svc.users.FindByAny(sysUserCtx(), i)
if err != nil {
return err
}
@ -707,7 +715,7 @@ func (svc service) exec(ctx context.Context, script string, runAs string, args S
// We search for the defined (run-as) user,
// assign it to authUser argument and make an
// authentication token for it
definer, err = svc.users.FindByAny(ctx, runAs)
definer, err = svc.users.FindByAny(sysUserCtx(), runAs)
if err != nil {
return err
}