Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Strict-mode shouldn't allow rule ref-heads to shadow input and data documents #6291

Closed
johanfylling opened this issue Oct 10, 2023 · 2 comments · Fixed by #6417
Closed

Strict-mode shouldn't allow rule ref-heads to shadow input and data documents #6291

johanfylling opened this issue Oct 10, 2023 · 2 comments · Fixed by #6417
Assignees
@johanfylling
Labels
bug pre1.0

Comments

@johanfylling
Copy link
Contributor

Currently, when strict-mode is enabled, rules like data.a.b := 1 and input.a.b := 1 doesn't generate errors.

Today, the input case will cause a complete replacement of the input document.

The data case doesn't produce error or output (!).
@johanfylling johanfylling mentioned this issue Oct 10, 2023
Merged
@ashutosh-narkar
Copy link
Member

@johanfylling it would be good if we can enforce this check as part of the future.strict import. Even if we get #6285 in first, future.strict can enforce this later, correct?

@johanfylling
Copy link
Contributor Author

Yes, I think we shouldn't be afraid of adding new checks/stuff to future.strictfuture.compat even after it's live.

Some other things that we should gate behind the future.compat import, if we have the opportunity:

There is probably some point in time leading up to the 1.0 release where we should stop adding content; which we also need to communicate.

johanfylling added a commit to johanfylling/opa that referenced this issue Nov 16, 2023
@johanfylling
ast: Disallow root document shadowing in leading term of rule refs
18c42ff 
when:
* strict-mode is enabled
* `rego.v1` is imported

Fixes: open-policy-agent#6291
Signed-off-by: Johan Fylling <[email protected]>
@johanfylling johanfylling mentioned this issue Nov 16, 2023
Merged
ashutosh-narkar pushed a commit that referenced this issue Nov 16, 2023
@johanfylling @ashutosh-narkar
ast: Disallow root document shadowing in leading term of rule refs
ba021ab 
when:
* strict-mode is enabled
* `rego.v1` is imported

Fixes: #6291
Signed-off-by: Johan Fylling <[email protected]>
@BrewTestBot BrewTestBot mentioned this issue Nov 30, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@johanfylling johanfylling

Labels
bug pre1.0
Projects
Open Policy Agent v1.0
Status: Done
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

ast: Disallow root document shadowing in leading term of rule refs johanfylling/opa
2 participants
@ashutosh-narkar @johanfylling