Merge 0110061b79 into de234b888c

fix: admin api - SetPolicyForUserOrGroup avoid nil deref (#21400 )
2025-07-03 00:28:20 -03:00 · 2025-07-01 09:00:17 -07:00
1 changed files with 4 additions and 2 deletions
--- a/cmd/admin-handlers-users.go
+++ b/cmd/admin-handlers-users.go
@ -1827,16 +1827,18 @@ func (a adminAPIHandlers) SetPolicyForUserOrGroup(w http.ResponseWriter, r *http
 				iamLogIf(ctx, err)
 			} else if foundGroupDN == nil || !underBaseDN {
 				err = errNoSuchGroup
+			} else {
+				entityName = foundGroupDN.NormDN
 			}
-			entityName = foundGroupDN.NormDN
 		} else {
 			var foundUserDN *xldap.DNSearchResult
 			if foundUserDN, err = globalIAMSys.LDAPConfig.GetValidatedDNForUsername(entityName); err != nil {
 				iamLogIf(ctx, err)
 			} else if foundUserDN == nil {
 				err = errNoSuchUser
+			} else {
+				entityName = foundUserDN.NormDN
 			}
-			entityName = foundUserDN.NormDN
 		}
 		if err != nil {
 			writeErrorResponseJSON(ctx, w, toAdminAPIErr(ctx, err), r.URL)
Author	SHA1	Message	Date
himku	ed90e3ec49	Merge `0110061b79` into `de234b888c`	2025-07-03 00:28:20 -03:00
Burkov Egor	de234b888c	fix: admin api - SetPolicyForUserOrGroup avoid nil deref (#21400 ) VulnCheck / Analysis (push) Has been cancelled Details Lock Threads / action (push) Has been cancelled Details	2025-07-01 09:00:17 -07:00