Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

fix(critical): permission cache returns None causing 500 on every authenticated API call

Browse Source 
- get_cached_permissions() returned None when _get_current_permission_version failed
- deps.py get_current_user() crashed with AttributeError: NoneType.get()
- Fix: fall through to DB resolution instead of returning None
- Fix: add None guard in deps.py as safety net
This commit is contained in:
Agent Zero
2026-08-21 02:16:24 +02:00
parent 13e9865e8d
commit 3f8a8c93a7
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/deps.py
+2
View File
@@ -125,6 +125,8 @@ async def get_current_user(
user_id = uuid.UUID(session_data["user_id"])
resolved = await get_cached_permissions(db, redis, user_id, tenant_id)
if not resolved:
resolved = {"permissions": [], "denied": [], "field_permissions": {}, "is_system_admin": False}
session_data["permissions"] = resolved.get("permissions", [])
session_data["denied_permissions"] = resolved.get("denied", [])
session_data["field_permissions"] = resolved.get("field_permissions", {})