Method validateAllow

db/functions/function.go:226–257

AUTHORIZATION: Looks for bad '$' patterns in the config's Allow strings.

()

// Looks for bad '$' patterns in the config's Allow strings.
func (fn *FunctionConfig) validateAllow() error {
	if fn.Allow != nil {
		// Construct an args object with a value for each declared argument:
		fakeArgs := map[string]any{}
		for _, argName := range fn.Args {
			fakeArgs[argName] = "x"
		}
		// Subroutine that tests a pattern by trying to expand it with the args.
		// If the result is a 500 error, something's wrong with the pattern itself.
		checkPattern := func(pattern string) error {
			_, err := expandPattern(pattern, fakeArgs, nil)
			if err, ok := err.(*base.HTTPError); ok {
				if err != nil && err.Status >= http.StatusInternalServerError {
					return err
				}
			}
			return nil
		}
		// Test each role and channel string:
		for _, str := range fn.Allow.Roles {
			if err := checkPattern(str); err != nil {
				return err
			}
		}
		for _, str := range fn.Allow.Channels {
			if err := checkPattern(str); err != nil {
				return err
			}
		}
	}
	return nil
}

// Authorizes a User against the function config's Allow object:
// - The user's name must be contained in Users, OR