Kristoffer Dalby 8573ff9158 policy/v2: fix grant-only policies returning FilterAllowAll ...

compileFilterRules checked only pol.ACLs == nil to decide whether
to return FilterAllowAll (permit-any). Policies that use only Grants
(no ACLs) had nil ACLs, so the function short-circuited before
compiling any CapGrant rules. This meant cap/relay, cap/drive, and
any other App-based grant capabilities were silently ignored.

Check both ACLs and Grants are empty before returning FilterAllowAll.

Updates #2180

2026-04-01 14:10:42 +01:00

..

matcher

all: fix golangci-lint issues (#3064)

2026-02-06 21:45:32 +01:00

policyutil

policy/v2: implement CapGrant compilation with companion capabilities

2026-04-01 14:10:42 +01:00

v2

policy/v2: fix grant-only policies returning FilterAllowAll

2026-04-01 14:10:42 +01:00

pm.go

policy/v2,state,mapper: implement per-viewer via route steering

2026-04-01 14:10:42 +01:00

policy_autoapprove_test.go

policy/v2: refactor alias resolution to use ResolvedAddresses

2026-04-01 14:10:42 +01:00

policy_route_approval_test.go

all: apply golangci-lint 2.9.0 fixes

2026-02-19 08:21:23 +01:00

policy_test.go

policy/v2: add localpart:*@domain SSH user compilation

2026-02-28 05:14:11 -08:00

policy.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00

route_approval_test.go

all: upgrade to Go 1.26rc2 and modernize codebase

2026-02-08 12:35:23 +01:00