Handle winning revision logic in authorizeDoc

couchbase · Sep 13, 2023 · 0b4b1ae · 0b4b1ae
1 parent db7a319
commit 0b4b1ae
Showing 1 changed file with 10 additions and 1 deletion.
diff --git a/db/crud.go b/db/crud.go
@@ -550,7 +550,16 @@ func (col *DatabaseCollectionWithUser) authorizeDoc(doc *Document, revid string)
 	if revid == "" {
 		revid = doc.CurrentRev
 	}
-	if rev := doc.History[revid]; rev != nil {
+
+	if revid == doc.CurrentRev {
+		ch := base.SetOf()
+		for channelName, channelRemoval := range doc.Channels {
+			if channelRemoval == nil || channelRemoval.Seq == 0 {
+				ch.Add(channelName)
+			}
+		}
+		return col.user.AuthorizeAnyCollectionChannel(col.ScopeName, col.Name, ch)
+	} else if rev := doc.History[revid]; rev != nil {
 		// Authenticate against specific revision:
 		return col.user.AuthorizeAnyCollectionChannel(col.ScopeName, col.Name, rev.Channels)
 	} else {