A quick fix was applied to src/afw/authorization/afw_authorization.c in order to address an infinite recursion by temporarily entering intermediate mode during the execution of authorization handler code.
A broader discussion on how authorization code should be managed and delegated needs to be resolved in order to come up with a better, not-so-blunt solution to this problem. Specifically, we have to figure out:
How to securely allow authorization handlers to be installed and configured
How authorization handlers can execute code within a security domain that may range from "god mode" to a more targeted, delegated role, such as authorization decisions for a specific site or department.
A quick fix was applied to
src/afw/authorization/afw_authorization.cin order to address an infinite recursion by temporarily enteringintermediatemode during the execution of authorization handler code.A broader discussion on how authorization code should be managed and delegated needs to be resolved in order to come up with a better, not-so-blunt solution to this problem. Specifically, we have to figure out: