break the pointless loop when group matched

Signed-off-by: guoyao <1015105054@qq.com>
2021-10-11 11:11:30 +08:00 · 2021-10-11 11:11:30 +08:00 · a49af6cd1c
commit a49af6cd1c
parent 0e260a027b
1 changed files with 1 additions and 0 deletions
--- a/pkg/auth/authorizer/abac/abac.go
+++ b/pkg/auth/authorizer/abac/abac.go
@ -164,6 +164,7 @@ func subjectMatches(p abac.Policy, user user.Info) bool {
 			for _, group := range groups {
 				if p.Spec.Group == group {
 					matched = true
+					break
 				}
 			}
 			if !matched {