feat(plumber): allow root to access deactivated workers [fixes NET-695]…

… (#1968) * allow root to access deactivated workers
fluencelabs · Dec 19, 2023 · 2d13c8a · 2d13c8a
1 parent fe706a0
commit 2d13c8a
Showing 1 changed file with 8 additions and 5 deletions.
diff --git a/aquamarine/src/plumber.rs b/aquamarine/src/plumber.rs
@@ -116,11 +116,14 @@ impl<RT: AquaRuntime, F: ParticleFunctionStatic> Plumber<RT, F> {
             return;
         }
 
-        if !self.key_manager.is_worker_active(worker_id)
-            && !self
-                .key_manager
-                .is_management(particle.particle.init_peer_id)
-        {
+        let is_active = self.key_manager.is_worker_active(worker_id);
+        let is_manager = self
+            .key_manager
+            .is_management(particle.particle.init_peer_id);
+        let is_host = self.key_manager.is_host(particle.particle.init_peer_id);
+
+        // Only a manager or the host itself is allowed to access deactivated workers
+        if !is_active && !is_manager && !is_host {
             tracing::trace!(target: "worker_inactive", particle_id = particle.particle.id, worker_id = worker_id.to_string(), "Worker is not active");
             return;
         }