phoenix-oss/llama-stack-mirror
0
0
Fork 1
mirror of https://github.com/meta-llama/llama-stack.git synced 2025-07-15 01:26:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: auth sql store: user is owner policy (#2674)
Some checks failed
Integration Auth Tests / test-matrix (oauth2_token) (push) Failing after 2s
Details
Installer CI / lint (push) Failing after 4s
Details
Installer CI / smoke-test (push) Has been skipped
Details
Integration Tests / discover-tests (push) Successful in 5s
Details
Vector IO Integration Tests / test-matrix (3.12, remote::chromadb) (push) Failing after 4s
Details
Python Package Build Test / build (3.12) (push) Failing after 7s
Details
Python Package Build Test / build (3.13) (push) Failing after 8s
Details
Vector IO Integration Tests / test-matrix (3.13, inline::faiss) (push) Failing after 12s
Details
Test Llama Stack Build / generate-matrix (push) Successful in 10s
Details
Test External Providers / test-external-providers (venv) (push) Failing after 8s
Details
Vector IO Integration Tests / test-matrix (3.12, inline::milvus) (push) Failing after 14s
Details
Unit Tests / unit-tests (3.13) (push) Failing after 8s
Details
Test Llama Stack Build / build-custom-container-distribution (push) Failing after 10s
Details
Vector IO Integration Tests / test-matrix (3.12, remote::pgvector) (push) Failing after 13s
Details
Test Llama Stack Build / build-ubi9-container-distribution (push) Failing after 11s
Details
Vector IO Integration Tests / test-matrix (3.13, inline::sqlite-vec) (push) Failing after 12s
Details
Update ReadTheDocs / update-readthedocs (push) Failing after 10s
Details
Vector IO Integration Tests / test-matrix (3.12, inline::sqlite-vec) (push) Failing after 15s
Details
Vector IO Integration Tests / test-matrix (3.13, remote::pgvector) (push) Failing after 13s
Details
Test Llama Stack Build / build-single-provider (push) Failing after 13s
Details
Integration Tests / test-matrix (push) Failing after 11s
Details
Vector IO Integration Tests / test-matrix (3.12, inline::faiss) (push) Failing after 17s
Details
Unit Tests / unit-tests (3.12) (push) Failing after 13s
Details
Test Llama Stack Build / build (push) Failing after 6s
Details
Vector IO Integration Tests / test-matrix (3.13, remote::chromadb) (push) Failing after 15s
Details
SqlStore Integration Tests / test-postgres (3.12) (push) Failing after 20s
Details
Vector IO Integration Tests / test-matrix (3.13, inline::milvus) (push) Failing after 17s
Details
SqlStore Integration Tests / test-postgres (3.13) (push) Failing after 26s
Details
Pre-commit / pre-commit (push) Successful in 1m8s
Details

Browse source 
# What does this PR do?
The current authorized sql store implementation does not respect
user.principal (only checks attributes). This PR addresses that.


## Test Plan

Added test cases to integration tests.
This commit is contained in:
ehhuang 2025-07-10 14:40:32 -07:00 • committed by GitHub
parent 4cf1952c32
commit d880c2df0e
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
5 changed files with 247 additions and 175 deletions
Download patch file Download diff file Expand all files Collapse all files

2
llama_stack/distribution/access_control/access_control.py
View file

@ -81,7 +81,7 @@ def is_action_allowed(
if not len(policy):
policy = default_policy()
qualified_resource_id = resource.type + "::" + resource.identifier
qualified_resource_id = f"{resource.type}::{resource.identifier}"
for rule in policy:
if rule.forbid and matches_scope(rule.forbid, action, qualified_resource_id, user.principal):
if rule.when: