mirror of
https://gitlab.freedesktop.org/pipewire/pipewire.git
synced 2025-11-07 13:30:09 -05:00
global: combine all permissions of the object tree
To get the permissions of an object, combine the permissions of the object and all the parent nodes up to the root. This is necessary to enforce that a client can never see and object id (in this case the parent id) it is not allowed to see.
This commit is contained in:
parent
d7acbb222e
commit
83bc033837
1 changed files with 8 additions and 2 deletions
|
|
@ -38,9 +38,15 @@ uint32_t pw_global_get_permissions(struct pw_global *global, struct pw_client *c
|
|||
{
|
||||
uint32_t perms = PW_PERM_RWX;
|
||||
|
||||
if (client->permission_func != NULL)
|
||||
perms &= client->permission_func(global, client, client->permission_data);
|
||||
if (client->permission_func == NULL)
|
||||
return perms;
|
||||
|
||||
perms = client->permission_func(global, client, client->permission_data);
|
||||
|
||||
while (global != global->parent) {
|
||||
global = global->parent;
|
||||
perms &= client->permission_func(global, client, client->permission_data);
|
||||
}
|
||||
return perms;
|
||||
}
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue