Access is denied if query parameter is present.
dominicrathbone opened this issue · 1 comments
dominicrathbone commented
Line 70 in 73f4c96
originalUrl being passed through as route for findPermissionForRoute function includes the query parameters. Unless you explicitly have a policy to match against the query parameter and it's value exactly, access will be denied as no permissions will be found for the path.
nyambati commented
@dominicrathbone Your issue has been fixed with PR #101. Feel free to review and close this issue once you are content with the changes.