commit 48e2ab3df6957ee98073cc5683e994b67afa3dde
author Ivan Pilat <ivanpi@google.com> Tue Jun 07 01:25:27 2016 -0700
committer Ivan Pilat <ivanpi@google.com> Tue Jun 07 11:28:21 2016 +0000
tree 73ad74d793c7e4ba2ede9070a1ec419c49ce8adf
parent 1ab3b1bcfa5f8ce75b32b096f44a91327367ab1f

security: Do not skip ACL checks when using same principal.

Syncbase is frequently run using the same principal (key pair) as
its clients. The default authorizer would skip all ACL checks in
this case, which is undesirable since it can e.g. allow the client
to put rows into a read-only collection, which would be rejected
by a remote peer when synced.

For this reason, this CL removes the short-circuit check for the
same public key and always checks the ACL.

MultiPart: 1/3
Change-Id: Idfcc470bd93f4d67fd8e4391a4f087704165e85f