Merge pull request #105598 from gy95/match

break the pointless loop when group matched
2022-01-05 09:22:38 -08:00 · 2022-01-05 09:22:38 -08:00 · 24a43bc6a6
commit 24a43bc6a6
parent 25450b9521 a49af6cd1c
1 changed files with 1 additions and 0 deletions
--- a/pkg/auth/authorizer/abac/abac.go
+++ b/pkg/auth/authorizer/abac/abac.go
@ -164,6 +164,7 @@ func subjectMatches(p abac.Policy, user user.Info) bool {
 			for _, group := range groups {
 				if p.Spec.Group == group {
 					matched = true
+					break
 				}
 			}
 			if !matched {