Skip to content

fix: Policy Authorizer strict checking forbid_unless#2678

Merged
zachdaniel merged 1 commit intoash-project:mainfrom
mbuhot:fix-2677-strict-forbid-unless
Apr 15, 2026
Merged

fix: Policy Authorizer strict checking forbid_unless#2678
zachdaniel merged 1 commit intoash-project:mainfrom
mbuhot:fix-2677-strict-forbid-unless

Conversation

@mbuhot
Copy link
Copy Markdown
Contributor

@mbuhot mbuhot commented Apr 15, 2026

Fixes #2677

forbid_unless checks would not :halt in policy_fails_statically?, causing a subsequent authorize_if to cause the result to be authorized.

Contributor checklist

Leave anything that you believe does not apply unchecked.

  • I accept the AI Policy, or AI was not used in the creation of this PR.
  • Bug fixes include regression tests

forbid_unless checks would not :halt in policy_fails_statically?, causing a subsequent authorize_if to
cause the result to be authorized.
@zachdaniel zachdaniel merged commit 68350bd into ash-project:main Apr 15, 2026
36 checks passed
@zachdaniel
Copy link
Copy Markdown
Contributor

🚀 Thank you for your contribution! 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ash.can? incorrect for strict read policy using forbid_unless and authorize_if

2 participants