Leopoldadmin/leocrm
1
0
Fork 0
Code Issues 363 Pull Requests Actions 1 Packages Projects Releases 1 Wiki Activity

fix(critical): permission cache returns None causing 500 on every authenticated API call

Browse Source 
- get_cached_permissions() returned None when _get_current_permission_version failed
- deps.py get_current_user() crashed with AttributeError: NoneType.get()
- Fix: fall through to DB resolution instead of returning None
- Fix: add None guard in deps.py as safety net
This commit is contained in:
Agent Zero
2026-08-21 02:16:24 +02:00
parent 13e9865e8d
commit 3f8a8c93a7
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/core/permissions.py
+1 -1
View File
@@ -340,7 +340,7 @@ async def get_cached_permissions(
exc_info=True, exc_info=True,
) )
await redis.delete(cache_key) await redis.delete(cache_key)
return None # Fall through to re-resolution from DB # Fall through to re-resolution from DB (don't return None)
if cached_version == current_version: if cached_version == current_version:
return data return data
app/deps.py
+2
View File
@@ -125,6 +125,8 @@ async def get_current_user(
user_id = uuid.UUID(session_data["user_id"]) user_id = uuid.UUID(session_data["user_id"])
resolved = await get_cached_permissions(db, redis, user_id, tenant_id) resolved = await get_cached_permissions(db, redis, user_id, tenant_id)
if not resolved:
resolved = {"permissions": [], "denied": [], "field_permissions": {}, "is_system_admin": False}
session_data["permissions"] = resolved.get("permissions", []) session_data["permissions"] = resolved.get("permissions", [])
session_data["denied_permissions"] = resolved.get("denied", []) session_data["denied_permissions"] = resolved.get("denied", [])
session_data["field_permissions"] = resolved.get("field_permissions", {}) session_data["field_permissions"] = resolved.get("field_permissions", {})