Tim Gross 4a5921cb16 acl: disallow leading / on variable paths (#23757) ...

The path for a Variable never begins with a leading `/`, because it's stripped
off in the API before it ever gets to the state store. The CLI and UI allow the
leading `/` for convenience, but this can be misleading when it comes to writing
ACL policies. An ACL policy with a path starting with a leading `/` will never
match.

Update the ACL policy parser so that we prevent an incorrect variable path in
the policy.

Fixes: https://github.com/hashicorp/nomad/issues/23730

2024-08-07 09:26:18 -04:00

..

acl_test.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00

acl.go

acls: reduce permissions of client agent virtual policy (#23304)

2024-06-12 11:32:22 -04:00

policy_test.go

acl: disallow leading / on variable paths (#23757)

2024-08-07 09:26:18 -04:00

policy.go

acl: disallow leading / on variable paths (#23757)

2024-08-07 09:26:18 -04:00

virtual.go

auth: use ACLsDisabledACL when ACLs are disabled (#18754)

2023-10-16 09:30:24 -04:00