Check LDAP group name after PrivilegeMapperEntry fully parsed
Current code checks if the LDAP group name matches when looping through
the PrivilegeMapperEntry interface. When GroupName is parsed first, it
may assign a wrong Privilege value to the group. This patch fixes such
issue by checking the LDAP group name after a mapping entry is fully
parsed, and also exits the loop after match to improve performance.
Tested:
Verified correct group privilege is returned when multiple mapping
entries are configured.
Change-Id: I4795e3f1f974624bb2b46c40ccd729e259512ce4
Signed-off-by: Jiaqing Zhao <jiaqing.zhao@intel.com>
1 file changed