Fix group deny statement check.

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.

GNU Affero General Public License v3.0

1.37k stars 169 forks source link

Fix group deny statement check. #103

Closed RyanJarv closed 2 years ago

RyanJarv commented 2 years ago

Noticed this debugging some unexpected results returned from the analysis subcommand. The local_check_authorization_full function should return false when a deny statement is encountered in a group policy.

ncc-erik-steringer commented 2 years ago

Great catch. I'll roll this into the master branch shortly and add some unit tests around this scenario.

ncc-erik-steringer commented 2 years ago

Done in 84d09457bb0fda1ca9eebd357806c5a9cb243b21

ncc-erik-steringer commented 2 years ago

v1.1.5 is released with the fix, closing this PR.