only hit authorization if there are data attributes

opentdf · Nov 13, 2024 · cc04dc6 · cc04dc6
1 parent 88496cd
commit cc04dc6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/service/kas/access/accessPdp.go b/service/kas/access/accessPdp.go
@@ -15,11 +15,11 @@ const (
 )
 
 func (p *Provider) canAccess(ctx context.Context, token *authorization.Token, policy Policy) (bool, error) {
-	if len(policy.Body.Dissem) > 0 {
+	if policy.Body.Dissem != nil && len(policy.Body.Dissem) > 0 {
 		// TODO: Move dissems check to the getdecisions endpoint
 		p.Logger.Error("Dissems check is not enabled in v2 platform kas")
 	}
-	if policy.Body.DataAttributes != nil {
+	if policy.Body.DataAttributes != nil && len(policy.Body.DataAttributes) > 0 {
 		attrAccess, err := p.checkAttributes(ctx, policy.Body.DataAttributes, token)
 		if err != nil {
 			return false, err