• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

aserto-dev / azm
61%
main: 68%

Build:
Build:
LAST BUILD BRANCH: update-deps
DEFAULT BRANCH: main
Repo Added 23 May 2023 04:34AM UTC
Token eWLgb4S8kjsgWGcW414FkvzmKJyqhicla regen
Build 176 Last
Files 35
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH fix-inverse
branch: fix-inverse
CHANGE BRANCH
x
Reset
Sync Branches
  • fix-inverse
  • 0.21
  • CVE-2025-22870
  • add-safe-assert
  • add_diff_validate
  • allow-dots-in-permissions
  • available-permissions
  • azm
  • azmcmd
  • bugfix/checks-nil-default
  • bugfix/expand-permission-term
  • bugfix/invert-arrows
  • bugfix/jobpool-panic
  • bugfix/negation-type-subset
  • bugfix/search-objects
  • bugfix/validation
  • bugfix/wildcard-only-relations
  • cache-metadata
  • cache-query
  • check-cycles
  • check-reason
  • checks
  • chore/cleanup-generics
  • deps-250123
  • error-messages
  • errors
  • expand
  • fix-CVE-2024-21664
  • fix-check-trace
  • fix-inverted-negation-and-intersection
  • fix-load-empty-manifest
  • fix/diff-mutex
  • fix/errlistener
  • fix/parser-warnings
  • fix/upd-deps
  • fix_panic
  • get-graph
  • go-aserto
  • go-aserto-upd
  • go-directory
  • identifier
  • implement_graph
  • implement_model_diffing
  • import-status
  • inversion-fix
  • invert-unions
  • load-v2-manifest
  • main
  • model-v2
  • modelcache
  • more-tests
  • paging
  • parser-errors
  • relpool
  • relpool-rid
  • rm-mage
  • type-casing
  • upd-migrate
  • update-deps
  • version-agnostic-paging

01 Sep 2024 11:08PM UTC coverage: 60.819% (+0.01%) from 60.806%
10658163919

Pull #54

github

ronenh
Fix GetGraph bug

This fixes a model-inversion bug. Given:
```yaml
folder:
  relations:
    owner: user
  permissions:
    is_owner: owner | parent->is_owner

doc:
  relations:
    parent: folder
    viewer: user | user:* | group#member
  permissions:
    can_view: viewer | parent->owner
```

The `can_view` premission isn't inverted correctly.
A `group#member` can have the `can_view` permission, but only
through the first term (`viewer`) because `parent-owner` can only
be a `user`.
The problem is that the inversion logic attempts to create the inversion
of `parent->owner` on `group`
(i.e. `group#doc^can_view#member: doc_viewer#member | doc_owner#doc_parent`)
But `group` has no `doc_owner` relation because `group#member` isn't assignable
to`folder#owner`.
Pull Request #54: Fix GetGraph bug

4 of 6 new or added lines in 2 files covered. (66.67%)

2808 of 4617 relevant lines covered (60.82%)

0.68 hits per line

Relevant lines Covered
Build:
Build:
4617 RELEVANT LINES 2808 COVERED LINES
0.68 HITS PER LINE
Source Files on fix-inverse
  • Tree
  • List 40
  • Changed 2
  • Source Changed 0
  • Coverage Changed 2
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
10658163919 fix-inverse Fix GetGraph bug This fixes a model-inversion bug. Given: ```yaml folder: relations: owner: user permissions: is_owner: owner | parent->is_owner doc: relations: parent: folder viewer: user | user:* | group#member permissi... Pull #54 01 Sep 2024 11:21PM UTC ronenh github
60.82
See All Builds (174)

Badge your Repo: azm

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc