lablup / lablup/backend.ai

Wire the RBAC validators into relation actions

Open Beginner friendly
#14,101 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
670
Forks
183
Avg merge
17h 7m
Merged PRs (30d)
358

Description

The relation validator exists but the composer leaves its slot empty, so relation actions run without any permission check (composer.py:419-422, actions/v2/relation/validator/rbac.py). Wire it and pin the wiring with a composition test so an empty slot cannot recur.

JIRA Issue: BA-7556

Contributor guide

Open the contributing guide

Research direction

Start in composer.py:419-422 and inspect the existing validator in actions/v2/relation/validator/rbac.py. Wire the RBAC validator into the empty relation-action slot, then add a composition test confirming the validator is present so the slot cannot be left empty again.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authorization, backend-api-design
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Active
Clarity
Clearly specified
Newbie friendliness
84/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.