Wire the RBAC validators into relation actions
Open
Beginner friendly
- Dominant language
- Python
- Stars
- 670
- Forks
- 183
- Avg merge
- 17h 7m
- Merged PRs (30d)
- 358
Description
The relation validator exists but the composer leaves its slot empty, so relation actions run without any permission check (composer.py:419-422, actions/v2/relation/validator/rbac.py). Wire it and pin the wiring with a composition test so an empty slot cannot recur.
JIRA Issue: BA-7556
Contributor guide
Research direction
Start in composer.py:419-422 and inspect the existing validator in actions/v2/relation/validator/rbac.py. Wire the RBAC validator into the empty relation-action slot, then add a composition test confirming the validator is present so the slot cannot be left empty again.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- authorization, backend-api-design
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Active
- Clarity
- Clearly specified
- Newbie friendliness
- 84/100