From 1fbe6a12f1bd6ad1a74190efa76f31681c43ce4d Mon Sep 17 00:00:00 2001 From: Anthony Lapenna Date: Mon, 7 Oct 2019 16:09:35 +1300 Subject: [PATCH] fix(api): fix invalid resource control check (#3225) --- api/http/proxy/docker_transport.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/http/proxy/docker_transport.go b/api/http/proxy/docker_transport.go index 8c1a2e28c..c5eb96a64 100644 --- a/api/http/proxy/docker_transport.go +++ b/api/http/proxy/docker_transport.go @@ -361,7 +361,7 @@ func (p *proxyTransport) restrictedOperation(request *http.Request, resourceID s } resourceControl := getResourceControlByResourceID(resourceID, resourceControls) - if resourceControl != nil && !canUserAccessResource(tokenData.ID, userTeamIDs, resourceControl) { + if resourceControl == nil || !canUserAccessResource(tokenData.ID, userTeamIDs, resourceControl) { return writeAccessDeniedResponse() } }