Commit f0122c1c authored by Leigh B Stoller's avatar Leigh B Stoller

Fix up ABAC credential checking.

parent 796822d9
...@@ -319,13 +319,12 @@ sub CheckCredentials($;$) ...@@ -319,13 +319,12 @@ sub CheckCredentials($;$)
} }
$speaksfor->SetTargetCert($speakee_certificate); $speaksfor->SetTargetCert($speakee_certificate);
} }
else { $speaksfor = GeniCredential::CheckCredential($speaksfor);
$speaksfor = GeniCredential::CheckCredential($speaksfor); if (GeniResponse::IsError($speaksfor)) {
if (GeniResponse::IsError($speaksfor)) { $error = $speaksfor;
$error = $speaksfor; goto bad;
goto bad;
}
} }
# Put this into the ENV for the backend scripts. # Put this into the ENV for the backend scripts.
if (GeniHRN::IsValid($speaksfor->target_urn()) && if (GeniHRN::IsValid($speaksfor->target_urn()) &&
$speaksfor->target_urn() =~ /^(urn:publicid:.*)$/) { $speaksfor->target_urn() =~ /^(urn:publicid:.*)$/) {
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment