stop checking policies at the first that matches

biscuit-auth · Dec 22, 2021 · 301b442 · 301b442
1 parent e5d9e21
commit 301b442
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/token/authorizer.rs b/src/token/authorizer.rs
@@ -362,7 +362,7 @@ impl<'t> Authorizer<'t> {
             }
         }
 
-        for (i, policy) in self.policies.iter().enumerate() {
+        'policies_test: for (i, policy) in self.policies.iter().enumerate() {
             for query in policy.queries.iter() {
                 let res = self
                     .world
@@ -378,6 +378,7 @@ impl<'t> Authorizer<'t> {
                         PolicyKind::Allow => policy_result = Some(Ok(i)),
                         PolicyKind::Deny => policy_result = Some(Err(i)),
                     };
+                    break 'policies_test;
                 }
             }
         }