This PR modifies iam__enum_permissions to display unconfirmed permissions, and counts of each.
Pre
To start, we have a new user and key entered in to the db.
When running iam__enum_permissions for this (limited) user, we get back the following output.
When looking at this output, it looks like the module failed. We have a FAILURE, a FAILURE, and while it says 'confirmed permissions for ...', nothing is listed like a user would expect, so I assume no permissions were found BUT the query didn't fail. We move on down to the summary, and we see 0 and 0. So we must not have been able to enumerate.
However, we run a whoami and we see we did get permissions:
The problem is that these are unconfirmed permissions. However, they were found so the user should be notified of something.
Post
We now keep track of how many unconfirmed items were present, and a count of the actual permissions. This allows us to give the user better output so they know data was found, which matches what they'll see in whoami.
This PR modifies
iam__enum_permissions
to display unconfirmed permissions, and counts of each.Pre
To start, we have a new user and key entered in to the db. When running
iam__enum_permissions
for this (limited) user, we get back the following output. When looking at this output, it looks like the module failed. We have aFAILURE
, aFAILURE
, and while it says 'confirmed permissions for ...', nothing is listed like a user would expect, so I assume no permissions were found BUT the query didn't fail. We move on down to the summary, and we see 0 and 0. So we must not have been able to enumerate. However, we run awhoami
and we see we did get permissions:The problem is that these are unconfirmed permissions. However, they were found so the user should be notified of something.
Post
We now keep track of how many unconfirmed items were present, and a count of the actual permissions. This allows us to give the user better output so they know data was found, which matches what they'll see in
whoami
.