Only one group is being checked for node with multiple group memberships

nccgroup / PMapper

A tool for quickly evaluating IAM permissions in AWS.

GNU Affero General Public License v3.0

1.37k stars 169 forks source link

Closed pr454nn4kum4r closed 3 years ago

pr454nn4kum4r commented 4 years ago

Invalid break only lets one group_membership for node while building graph, even-though there are multiple group_memberships for a node.

For example: userA has three groups Group A, Group B, Group C. Only One Group out of three is being considered for node userA

prasanna2av commented 3 years ago

@ncc-erik-steringer Any comment on this? Due to this, PMapper results are inaccurate

ncc-erik-steringer commented 3 years ago

@prasanna2av , I have to change this to point to the v1.1.0-dev branch but the change LGTM at first glance.