Feat: remove input partion filter in policy enforcer

gisaia · Jun 14, 2024 · cb18e89 · cb18e89
1 parent bfe6075
commit cb18e89
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/arlas-commons/src/main/java/io/arlas/filter/impl/AbstractPolicyEnforcer.java b/arlas-commons/src/main/java/io/arlas/filter/impl/AbstractPolicyEnforcer.java
@@ -235,7 +235,9 @@ public void filter(ContainerRequestContext ctx, String method, String path, Stri
                 Object token = getObjectToken(accessToken, orgFilter);
                 Set<String> permissions = getPermissionsClaim(token);
                 Optional<String> org = Optional.ofNullable(new ArlasClaims(permissions.stream().toList()).getVariables().get(VAR_ORG));
-
+                if(ctx.getHeaders().get(PARTITION_FILTER) != null){
+                    ctx.getHeaders().remove(PARTITION_FILTER); // remove it in case it's been set manually
+                }
                 ctx.getHeaders().remove(authConf.headerUser); // remove it in case it's been set manually
                 String userId = getSubject(token);
                 if (!StringUtil.isNullOrEmpty(userId)) {