Files
nomad/.changelog/23757.txt
Tim Gross 4a5921cb16 acl: disallow leading / on variable paths (#23757)
The path for a Variable never begins with a leading `/`, because it's stripped
off in the API before it ever gets to the state store. The CLI and UI allow the
leading `/` for convenience, but this can be misleading when it comes to writing
ACL policies. An ACL policy with a path starting with a leading `/` will never
match.

Update the ACL policy parser so that we prevent an incorrect variable path in
the policy.

Fixes: https://github.com/hashicorp/nomad/issues/23730
2024-08-07 09:26:18 -04:00

4 lines
160 B
Plaintext

```release-note:improvement
acl: Submitting a policy with a leading `/` in a variable path will now return an error to prevent improperly working policies.
```