headscale/hscontrol/policy/v2
Kristoffer Dalby 21e3f2598d policy: fix issue where non existent user results in empty ssh pol
When we encounter a source we cannot resolve, we skipped the whole rule,
even if some of the srcs could be resolved. In this case, if we had one user
that exists and one that does not.

In the regular policy, we log this, and still let a rule be created from what
does exist, while in the SSH policy we did not.

This commit fixes it so the behaviour is the same.

Fixes #2863

Signed-off-by: Kristoffer Dalby <kristoffer@tailscale.com>
2025-11-10 20:34:12 +01:00
..
filter.go policy: fix issue where non existent user results in empty ssh pol 2025-11-10 20:34:12 +01:00
filter_test.go chore: fix autogroup:self with other acl rules (#2842) 2025-11-02 10:48:27 +00:00
policy.go policy: fix autogroup:self propagation and optimize cache invalidation (#2807) 2025-10-23 17:57:41 +02:00
policy_test.go chore: fix autogroup:self with other acl rules (#2842) 2025-11-02 10:48:27 +00:00
types.go feat: add autogroup:self (#2789) 2025-10-16 12:59:52 +02:00
types_test.go feat: add autogroup:self (#2789) 2025-10-16 12:59:52 +02:00
utils.go policy: reject unsupported fields (#2764) 2025-09-12 14:47:56 +02:00
utils_test.go integration: replace time.Sleep with assert.EventuallyWithT (#2680) 2025-07-10 23:38:55 +02:00