Skip to content

Add category-level permissions for App Context enumeration - #236

Merged
jguz-pubnub merged 3 commits into
masterfrom
python-pam-changes
Oct 19, 2026
Merged

jguz-pubnub merged 3 commits into
masterfrom
python-pam-changes

Conversation

@jguz-pubnub

@jguz-pubnub jguz-pubnub commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

feat(pam): add category-level permissions for App Context enumeration

@jguz-pubnub
jguz-pubnub requested a review from parfeon as a code owner October 8, 2026 08:31
@pubnub-snyk-universal-prd

pubnub-snyk-universal-prd Bot commented Oct 8, 2026 •

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues
✅ Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@jguz-pubnub jguz-pubnub changed the title feat(pam): add category-level permissions for App Context enumeration Add category-level permissions for App Context enumeration Oct 8, 2026

@parfeon parfeon left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From categories specs it looks like we need to have few checks added into validation method.

Comment on lines +131 to +133
if self._categories:
params['category'] = utils.join_items(self._categories)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

validate_params method doesn't have verification for the case when user specify categories we need to ensure that auth has been passed as well as required.
No check on what exactly has been passed for the categories and there is only channels and uuids allowed.
Also, if categories not empty we need to verify that only get permissions has been granted.

@jguz-pubnub jguz-pubnub Oct 12, 2026 •

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Does the server already enforce these rules? I see the spec documents a 400 for each case with a distinct message. Anyway, I'll add these validations

@jguz-pubnub
jguz-pubnub requested a review from parfeon October 12, 2026 18:46

@parfeon parfeon left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@jguz-pubnub

Copy link
Copy Markdown
Contributor Author

@pubnub-release-bot release

@jguz-pubnub
jguz-pubnub merged commit b7da04a into master Oct 19, 2026
15 of 27 checks passed
@jguz-pubnub
jguz-pubnub deleted the python-pam-changes branch October 19, 2026 09:58
@pubnub-release-bot

Copy link
Copy Markdown
Contributor

🚀 Release successfully completed 🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants