Method _is_allowed_internal

src/auth/authorization.py:50–68

(self, user_id, normalized_allowed_users)

        return self._is_allowed_internal(user_id, normalized_users)

    def _is_allowed_internal(self, user_id, normalized_allowed_users):
        if not normalized_allowed_users:
            return False

        if normalized_allowed_users == ANY_USER:
            return True

        if _normalize_user(user_id) in normalized_allowed_users:
            return True

        user_groups = self._groups_provider.get_groups(user_id)
        if not user_groups:
            return False

        for group in user_groups:
            if _normalize_user(GROUP_PREFIX + group) in normalized_allowed_users:
                return True

        return False


class EmptyGroupProvider: