DESIGN: Fix the critical bounds check in pseudocode

Issue pointed out by @Geal in review:

  https://github.com/CleverCloud/biscuit/pull/6#discussion_r246476442
This commit is contained in:
The Fox in the Shell 2019-01-17 14:25:52 +01:00
parent bae7c39f4a
commit 79a47fc5b7

View File

@ -134,7 +134,7 @@ for caveat in biscuit:
if predicate.isbound:
bounds.add(predicate.attribute)
if bounds != critical:
if not bounds.contains(critical):
return False
return True