diff options
author | Salvatore Sanfilippo <antirez@gmail.com> | 2020-05-19 16:19:28 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-05-19 16:19:28 +0200 |
commit | 23a85ba191ed4d42cc88b76972dc3cb409e765dc (patch) | |
tree | ae959d20723bf4181abfcc080ac017d1e061f2f2 | |
parent | d949e8fe1882d280c3678403c16e778ef2d5f0f0 (diff) | |
parent | edc1f7b176af202794a23dbb679128d09f16740a (diff) | |
download | redis-23a85ba191ed4d42cc88b76972dc3cb409e765dc.tar.gz |
Merge pull request #7276 from hujiecs/fix-clear-all-command-flag-in-acl
fix clear USER_FLAG_ALLCOMMANDS flag in acl
-rw-r--r-- | src/acl.c | 9 |
1 files changed, 5 insertions, 4 deletions
@@ -375,12 +375,13 @@ int ACLUserCanExecuteFutureCommands(user *u) { * to skip the command bit explicit test. */ void ACLSetUserCommandBit(user *u, unsigned long id, int value) { uint64_t word, bit; - if (value == 0) u->flags &= ~USER_FLAG_ALLCOMMANDS; if (ACLGetCommandBitCoordinates(id,&word,&bit) == C_ERR) return; - if (value) + if (value) { u->allowed_commands[word] |= bit; - else + } else { u->allowed_commands[word] &= ~bit; + u->flags &= ~USER_FLAG_ALLCOMMANDS; + } } /* This is like ACLSetUserCommandBit(), but instead of setting the specified @@ -845,7 +846,6 @@ int ACLSetUser(user *u, const char *op, ssize_t oplen) { errno = ENOENT; return C_ERR; } - unsigned long id = ACLGetCommandID(copy); /* The subcommand cannot be empty, so things like DEBUG| * are syntax errors of course. */ @@ -858,6 +858,7 @@ int ACLSetUser(user *u, const char *op, ssize_t oplen) { /* The command should not be set right now in the command * bitmap, because adding a subcommand of a fully added * command is probably an error on the user side. */ + unsigned long id = ACLGetCommandID(copy); if (ACLGetUserCommandBit(u,id) == 1) { zfree(copy); errno = EBUSY; |