Fix a bug with ACL enforcement of reads on namespaced config entries. (#7239)

This commit is contained in:
Matt Keeler 2020-02-07 08:30:40 -05:00 committed by GitHub
parent aa9db3f903
commit f610d1d791
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 0 deletions

View File

@ -88,6 +88,8 @@ func (c *ConfigEntry) Get(args *structs.ConfigEntryQuery, reply *structs.ConfigE
if err != nil {
return err
}
lookupEntry.GetEnterpriseMeta().Merge(&args.EnterpriseMeta)
if authz != nil && !lookupEntry.CanRead(authz) {
return acl.ErrPermissionDenied
}