condition change to support password reset

Signed-off-by: Rajshekar Chavakula <[email protected]>
sensu · Feb 14, 2024 · 37c80f4 · 37c80f4
1 parent 9587df6
commit 37c80f4
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/backend/apid/middlewares/authorization_attributes.go b/backend/apid/middlewares/authorization_attributes.go
@@ -93,9 +93,8 @@ func (a AuthorizationAttributes) Then(next http.Handler) http.Handler {
 				attrs.Resource = types.LocalSelfUserResource
 			}
 
-			// Change the resource to LocalSelfUserResource if a user tries to change
-			// its own password
-			if attrs.Verb == "update" && vars["subresource"] == "password" {
+			switch vars["subresource"] {
+			case "password", "":
 				attrs.Resource = types.LocalSelfUserResource
 			}
 		}