fix(core): add back isEnabled check to hasPermission method to preven…

…t NPEs (#433)
spinnaker · Jul 1, 2019 · bd52240 · bd52240
1 parent d6c1400
commit bd52240
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java b/fiat-api/src/main/java/com/netflix/spinnaker/fiat/shared/FiatPermissionEvaluator.java
@@ -196,6 +196,9 @@ public boolean hasPermission(
       Serializable resourceName,
       String resourceType,
       Object authorization) {
+    if (!fiatStatus.isEnabled()) {
+      return true;
+    }
     return hasPermission(getUsername(authentication), resourceName, resourceType, authorization);
   }