Remove default rule if rules specified (#56)

ibm-cloud-security · Mar 10, 2020 · 179fda2 · 179fda2
1 parent 5a43a07
commit 179fda2
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/adapter/policy/engine/engine.go b/adapter/policy/engine/engine.go
@@ -77,7 +77,7 @@ func (m *engine) Evaluate(target *authnz.TargetMsg) (*Action, error) {
 		if p.Rules == nil {
 			policies[i].Rules = createDefaultRules(p)
 		} else {
-			policies[i].Rules = append(p.Rules, createDefaultRules(p)...)
+			policies[i].Rules = p.Rules
 		}
 	}
 
@@ -150,8 +150,8 @@ func createDefaultRules(action Action) []v1.Rule {
 	case policy.OIDC:
 		return []v1.Rule{
 			{
-				Claim: aud,
-				Match: "ANY",
+				Claim:  aud,
+				Match:  "ANY",
 				Values: []string{action.Client.ID()},
 			},
 		}