From a49af6cd1ced67c550309c245b0183d8164e3207 Mon Sep 17 00:00:00 2001
From: guoyao <1015105054@qq.com>
Date: Mon, 11 Oct 2021 11:11:30 +0800
Subject: [PATCH] break the pointless loop when group matched

Signed-off-by: guoyao <1015105054@qq.com>
---
 pkg/auth/authorizer/abac/abac.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkg/auth/authorizer/abac/abac.go b/pkg/auth/authorizer/abac/abac.go
index 18735a5c3e3..b69c14419b3 100644
--- a/pkg/auth/authorizer/abac/abac.go
+++ b/pkg/auth/authorizer/abac/abac.go
@@ -164,6 +164,7 @@ func subjectMatches(p abac.Policy, user user.Info) bool {
 			for _, group := range groups {
 				if p.Spec.Group == group {
 					matched = true
+					break
 				}
 			}
 			if !matched {